Edit tour

Windows Analysis Report
http://tekascend.com

Overview

General Information

Sample URL:	http://tekascend.com
Analysis ID:	1585485
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTTP GET or POST without a user agent

Classification

Process Tree

System is w11x64_office

chrome.exe (PID: 944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 290DF23002E9B52249B5549F0C668A86)

chrome.exe (PID: 6088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2096,i,10004819936311780155,16193936978593822212,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2220 /prefetch:3 MD5: 290DF23002E9B52249B5549F0C668A86)

chrome.exe (PID: 1068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://tekascend.com" MD5: 290DF23002E9B52249B5549F0C668A86)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://tekascend.com

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://tekascend.com/favicon.ico

Avira URL Cloud: Label: malware

Source: https://tekascend.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.25:59730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.25:59730 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.25:64295 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736269431014&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1Accept-Encoding: gzip, deflateContent-Length: 7359Content-Type: application/json; charset=UTF-8Host: browser.events.data.msn.cnConnection: Keep-AliveCache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.158.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.73.31
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.73.30
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.73.30
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.73.30
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.73.30
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.73.30
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.73.30
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tekascend.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tekascend.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tekascend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/officeclicktorun.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v9s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /creativeservice/2d863f0f-0fd5-72db-6971-f905df03ef53_3255140379518978990_128000000004796009_assets__image_1709055739600.jpg HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631Host: res.public.onecdn.static.microsoftConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239399456844_1JJWL84ZWYQ0EIU0Z&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239399456843_14HWKSUZSEOH44H5N&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239402415510_1LQQ8WSBAXW97X0WT&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239399230513_1725RTMX37W73V5P6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239399230515_1O5S4SCQK1NL15G8R&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239402456886_16PSERWAUMTCB5AWR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=34640ee7-1169-4cdf-9972-6f6462080122&user=m-339A2A61895267C400B83F3088FA6607&cm=de-ch&caller=bgtask&theme=light&nw=false&msrc=2&it=app&scn=al_app_anon&clientFeatures=1 HTTP/1.1Referer: https://windows.msn.com/Accept-Encoding: gzip, deflatemuid: 339A2A61895267C400B83F3088FA6607User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0Host: assets.msn.comConnection: Keep-AliveCookie: MUID=339A2A61895267C400B83F3088FA6607
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/WindyV2.png HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: assets.msn.comConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: tekascend.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.26.2Date: Tue, 07 Jan 2025 17:02:24 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 279Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.26.2Date: Tue, 07 Jan 2025 17:02:25 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 276Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64298
Source: unknown	Network traffic detected: HTTP traffic on port 64300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64308
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64300
Source: unknown	Network traffic detected: HTTP traffic on port 64303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64304
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59730
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59731
Source: unknown	Network traffic detected: HTTP traffic on port 64298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 64302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59743
Source: unknown	Network traffic detected: HTTP traffic on port 64297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64305 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.25:59730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.25:59730 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir944_1681496300

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir944_1681496300

Jump to behavior

Source: classification engine

Classification label: mal56.win@18/4@6/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2096,i,10004819936311780155,16193936978593822212,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2220 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://tekascend.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2096,i,10004819936311780155,16193936978593822212,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2220 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://tekascend.com	100%	Avira URL Cloud	malware

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://tekascend.com/favicon.ico	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tekascend.com	166.1.209.92	true	false		high
www.google.com	142.250.186.164	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://browser.events.data.msn.cn/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736269431014&w=0&anoncknm=al_app_anon&NoResponseBody=true	false		high
https://res.public.onecdn.static.microsoft/creativeservice/2d863f0f-0fd5-72db-6971-f905df03ef53_3255140379518978990_128000000004796009_assets__image_1709055739600.jpg	false		high
https://tekascend.com/	false		unknown
https://tekascend.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239402415510_1LQQ8WSBAXW97X0WT&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239399230513_1725RTMX37W73V5P6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://assets.msn.com/service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=34640ee7-1169-4cdf-9972-6f6462080122&user=m-339A2A61895267C400B83F3088FA6607&cm=de-ch&caller=bgtask&theme=light&nw=false&msrc=2&it=app&scn=al_app_anon&clientFeatures=1	false		high
https://otelrules.svc.static.microsoft/rules/rule120607v1s19.xml	false		high
https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/WindyV2.png	false		high
https://otelrules.svc.static.microsoft/rules/rule120603v9s19.xml	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239399456844_1JJWL84ZWYQ0EIU0Z&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239402456886_16PSERWAUMTCB5AWR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239399456843_14HWKSUZSEOH44H5N&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239399230515_1O5S4SCQK1NL15G8R&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://otelrules.svc.static.microsoft/rules/officeclicktorun.exe-Production-v19.bundle	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
166.1.209.92	tekascend.com	United States		11798	ACEDATACENTERS-AS-1US	false
142.250.186.164	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.25

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585485
Start date and time:	2025-01-07 18:01:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://tekascend.com
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	33
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@18/4@6/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SecurityHealthHost.exe, dllhost.exe, RuntimeBroker.exe, SIHClient.exe, appidcertstorecheck.exe, backgroundTaskHost.exe, BackgroundTransferHost.exe, ShellExperienceHost.exe, WMIADAP.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.64.149.23, 104.18.38.233, 172.217.23.99, 142.250.186.142, 74.125.206.84, 142.250.185.174, 172.217.16.206, 142.250.185.110, 142.250.181.238, 142.250.184.238, 142.250.185.142, 216.58.206.74, 142.250.186.138, 216.58.212.138, 142.250.181.234, 142.250.184.202, 142.250.186.106, 216.58.212.170, 142.250.184.234, 216.58.206.42, 172.217.16.202, 142.250.186.74, 142.250.185.74, 172.217.18.10, 142.250.186.42, 142.250.74.202, 172.217.23.106, 142.250.185.78, 142.250.185.67, 142.250.186.110, 142.250.186.174, 142.250.184.206, 216.58.206.78, 40.113.103.199, 4.175.87.197, 20.190.159.4, 20.223.36.55, 2.23.227.215, 20.199.58.43
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, assets.msn.com, client.wns.windows.com, crt.comodoca.com.cdn.cloudflare.net, accounts.google.com, slscr.update.microsoft.com, fd.api.iris.microsoft.com, tse1.mm.bing.net, clientservices.googleapis.com, www.googleapis.com, fe3cr.delivery.mp.microsoft.com, crt.comodoca.com, wns.notify.trafficmanager.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, otelrules.svc.static.microsoft, login.live.com, res.public.onecdn.static.microsoft, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://tekascend.com

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: http://tekascend.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://tekascend.com
URL: https://tekascend.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://tekascend.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	5.190711008043916
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIR+kn4G2BFm8oD:J0+oxBeRmR9etdzRxGezH0qT8+
MD5:	C55CD49A310924DC2A09C5CCE13B9E0E
SHA1:	45506B2FF58D32535F09ABDBCC232460A0C2AE2A
SHA-256:	150642B647CA921DEB8DE9BC3AD8A9E25AE1411FBB4AD962E75F38807692EBFC
SHA-512:	68192AA76625ACD8D4DA65E2BF529B390D207B66806A674B282121CD0C56BAA5C2F27B19E1A8DF3E00E0E189A5E0210F5E0DB0F1145D11AC4B3F47C4BB4BA97D
Malicious:	false
Reputation:	low
URL:	https://tekascend.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.41 (Ubuntu) Server at tekascend.com Port 443</address>.</body></html>.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	279
Entropy (8bit):	5.1687126283220595
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwIgsozEr6VyF02xxdGzsQWrKR+kn4G2BFm8oD:J0+oxBgsozR4F0+dgsQoK0qT8+
MD5:	64BB93942D22062280AC9F76D4AE0A64
SHA1:	D23A7FD1BF8843E2AC2217866EFC0E78E28449F3
SHA-256:	C06B9AEC0B79A2784645C85DB90C35296E3E9BB3B7275E4A78DE6E04805C2D6C
SHA-512:	6AC43C32C0C177ECF758D155C1272BE4EE77410835863030F4319977468EDD8791181030EE50262E5ABD37D66820D258A622851A880267BBAA83E49617DD0DF7
Malicious:	false
Reputation:	low
URL:	https://tekascend.com/
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access this resource.</p>.<hr>.<address>Apache/2.4.41 (Ubuntu) Server at tekascend.com Port 443</address>.</body></html>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 18:02:12.737884998 CET	49674	443	192.168.2.25	2.16.158.75
Jan 7, 2025 18:02:17.813226938 CET	49676	443	192.168.2.25	20.42.73.31
Jan 7, 2025 18:02:23.921087027 CET	59723	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:23.921257019 CET	59724	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:23.926944017 CET	80	59723	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:23.927042007 CET	59723	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:23.927099943 CET	80	59724	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:23.927207947 CET	59724	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:23.934509993 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:23.934559107 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:23.934616089 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:23.934973955 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:23.934998989 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.680583954 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.680860043 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:24.680870056 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.681744099 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.681811094 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:24.683072090 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:24.683135986 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.683398008 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:24.683403969 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.732372046 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:24.838318110 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.838411093 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:24.838460922 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:24.883629084 CET	59725	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:24.883644104 CET	443	59725	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.002628088 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.002686024 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.002765894 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.003113031 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.003127098 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.725146055 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.770911932 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.770925999 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.771389008 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.773410082 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.773478985 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.773895979 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.819327116 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.904469967 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.904540062 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:25.904584885 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.908322096 CET	59726	443	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:25.908339977 CET	443	59726	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:26.198544025 CET	59727	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:02:26.198585033 CET	443	59727	142.250.186.164	192.168.2.25
Jan 7, 2025 18:02:26.198662043 CET	59727	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:02:26.198997021 CET	59727	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:02:26.199011087 CET	443	59727	142.250.186.164	192.168.2.25
Jan 7, 2025 18:02:26.457739115 CET	59723	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:26.457777023 CET	59724	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:26.457835913 CET	59727	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:02:26.462687969 CET	80	59723	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:26.462755919 CET	59723	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:26.463074923 CET	80	59724	166.1.209.92	192.168.2.25
Jan 7, 2025 18:02:26.463129997 CET	59724	80	192.168.2.25	166.1.209.92
Jan 7, 2025 18:02:26.499335051 CET	443	59727	142.250.186.164	192.168.2.25
Jan 7, 2025 18:02:28.260416985 CET	49700	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:02:28.260499954 CET	49694	443	192.168.2.25	204.79.197.203
Jan 7, 2025 18:02:28.563951015 CET	49700	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:02:28.563950062 CET	49694	443	192.168.2.25	204.79.197.203
Jan 7, 2025 18:02:29.170932055 CET	49694	443	192.168.2.25	204.79.197.203
Jan 7, 2025 18:02:29.171003103 CET	49700	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:02:30.380935907 CET	49694	443	192.168.2.25	204.79.197.203
Jan 7, 2025 18:02:30.380949020 CET	49700	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:02:32.787966967 CET	49700	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:02:32.787975073 CET	49694	443	192.168.2.25	204.79.197.203
Jan 7, 2025 18:02:37.592941999 CET	49694	443	192.168.2.25	204.79.197.203
Jan 7, 2025 18:02:37.593003988 CET	49700	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:02:38.287751913 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:38.287781954 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:38.287864923 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:38.288351059 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:38.288361073 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:38.971764088 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:38.971848965 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:38.975287914 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:38.975294113 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:38.975528002 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:38.986860991 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.027339935 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.090708017 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.090734959 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.090755939 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.090874910 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.090884924 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.090934992 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.175432920 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.175453901 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.175546885 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.175565958 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.175607920 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.178195953 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.178212881 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.178273916 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.178281069 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.178323984 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.262610912 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.262631893 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.262794971 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.262810946 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.262861967 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.263463020 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.263478994 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.263551950 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.263557911 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.263593912 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.264472961 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.264491081 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.264547110 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.264555931 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.264595985 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.265906096 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.265922070 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.265997887 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.266004086 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.266047001 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.358778000 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.358797073 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.358886957 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.358907938 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.358957052 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.359102964 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.359129906 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.359158993 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.359164000 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.359194994 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.359215021 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.360035896 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.360091925 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.360204935 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.360256910 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.360956907 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.360972881 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.361022949 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.361028910 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.361066103 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.361186981 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.361202955 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.361253023 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.361258030 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.361296892 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.362104893 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.362118006 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.362168074 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.362174034 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.362198114 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.362207890 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.362970114 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.362987041 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.363039017 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.363044024 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.363080025 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.437706947 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.437856913 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.437858105 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.437870026 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.437932014 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438046932 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438061953 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438123941 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438127041 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438134909 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438177109 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438184023 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438199043 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438235044 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438250065 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438457012 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438510895 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438644886 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438688993 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438690901 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438704014 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438734055 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438747883 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438754082 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.438780069 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.438801050 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.442344904 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.442409039 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.442478895 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.442540884 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.442754984 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.442773104 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.442816019 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.442821026 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.442856073 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.443103075 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.443118095 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.443169117 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.443175077 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.443211079 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.524631977 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.524678946 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.524709940 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.524715900 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.524761915 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.525013924 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.525028944 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.525039911 CET	59730	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.525044918 CET	443	59730	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.639406919 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.639470100 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.639573097 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.639849901 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.639864922 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.640512943 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.640566111 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:39.640628099 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.640743971 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:39.640753984 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.275223017 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.275294065 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.275922060 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.275923014 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.275933027 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.275949001 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.276361942 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.276366949 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.276459932 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.276468039 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.382603884 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.382622957 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.382716894 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.382752895 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.382929087 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.382993937 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.383191109 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.383205891 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.383215904 CET	59732	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.383222103 CET	443	59732	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.430357933 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.430428028 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.430485010 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.430670977 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.430690050 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:40.430696011 CET	59731	443	192.168.2.25	13.107.246.45
Jan 7, 2025 18:02:40.430701017 CET	443	59731	13.107.246.45	192.168.2.25
Jan 7, 2025 18:02:47.197038889 CET	49700	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:02:47.197194099 CET	49694	443	192.168.2.25	204.79.197.203
Jan 7, 2025 18:02:56.410784960 CET	443	59727	142.250.186.164	192.168.2.25
Jan 7, 2025 18:02:56.410861015 CET	59727	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:11.794375896 CET	59712	80	192.168.2.25	199.232.210.172
Jan 7, 2025 18:03:11.799555063 CET	80	59712	199.232.210.172	192.168.2.25
Jan 7, 2025 18:03:11.799623966 CET	59712	80	192.168.2.25	199.232.210.172
Jan 7, 2025 18:03:19.287430048 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.287466049 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:19.287739038 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.298430920 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.298445940 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:19.931848049 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:19.931924105 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.938154936 CET	64295	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:03:19.942959070 CET	53	64295	1.1.1.1	192.168.2.25
Jan 7, 2025 18:03:19.943068027 CET	64295	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:03:19.946204901 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.946214914 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:19.947309971 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:19.947369099 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.948028088 CET	53	64295	1.1.1.1	192.168.2.25
Jan 7, 2025 18:03:19.967547894 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.967674017 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:19.967787981 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:19.967796087 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:19.967837095 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:20.082880974 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:20.123353004 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:20.265316963 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:20.265342951 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:20.265382051 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:20.265403032 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:20.265420914 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:20.265431881 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:20.265445948 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:20.265485048 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:20.303577900 CET	59743	443	192.168.2.25	2.16.168.105
Jan 7, 2025 18:03:20.303595066 CET	443	59743	2.16.168.105	192.168.2.25
Jan 7, 2025 18:03:20.494296074 CET	64295	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:03:20.495337009 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.495383024 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:20.495621920 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.495961905 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.495999098 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:20.496031046 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.496038914 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:20.496073008 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.496102095 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.497046947 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.497061014 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:20.497594118 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.497606993 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:20.498048067 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:20.498056889 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:20.499325037 CET	53	64295	1.1.1.1	192.168.2.25
Jan 7, 2025 18:03:20.499500036 CET	64295	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:03:21.056883097 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.057041883 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.059135914 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.059145927 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.060209990 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.060291052 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.061650038 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.061738014 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.062807083 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.062885046 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.063069105 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.063075066 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.063117027 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.063519001 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.063528061 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.063669920 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.063726902 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.064687014 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.064742088 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.065062046 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.065066099 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.065113068 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.066395998 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.066488028 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.067034006 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.067100048 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.067214012 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.067219019 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.067272902 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.069432020 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.069637060 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.069699049 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.069704056 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.069746971 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.070142031 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.070848942 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.107332945 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.111340046 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.111354113 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.169181108 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.169204950 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.169220924 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.169238091 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.169246912 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.169259071 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.169302940 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.172534943 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.172559977 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.172574997 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.172625065 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.172640085 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.172681093 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.176251888 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.176274061 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.176289082 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.176332951 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.176341057 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.176367044 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.176392078 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.253200054 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.253221989 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.253302097 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.253309965 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.253345966 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.253366947 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.255049944 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.255084038 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.255126953 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.255131006 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.255182028 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.258773088 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.258801937 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.258871078 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.258877993 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.258882046 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.258899927 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.258917093 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.258958101 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.258965969 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.259048939 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.260761023 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.260775089 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.260827065 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.260832071 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.260865927 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.261185884 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.261212111 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.261245012 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.261250019 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.261281013 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.261297941 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.338423967 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.338443995 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.338495016 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.338501930 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.338568926 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.339677095 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.339694023 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.339751959 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.339756966 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.339802980 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.341155052 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.341171026 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.341222048 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.341227055 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.341254950 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.341274023 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.363667965 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.363688946 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.363725901 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.363754034 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.363778114 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.363791943 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.363852978 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.363858938 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.363883972 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.363892078 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.364686966 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.364702940 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.364742994 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.364748955 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.364775896 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.364794016 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.364816904 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.364835978 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.364878893 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.364883900 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.365814924 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.365837097 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.365864992 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.365870953 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.365895987 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.365921021 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.366539001 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.366554976 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.366595030 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.366600990 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.366616011 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.366640091 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.366825104 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.366841078 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.366879940 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.366883993 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.366905928 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.366929054 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.367499113 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.367513895 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.367547989 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.367558002 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.367584944 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.367599964 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.425046921 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.425086975 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.425139904 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.425144911 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.425169945 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.425194025 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.425242901 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.425276995 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.425311089 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.425316095 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.425344944 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.425380945 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.426146030 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.426162958 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.426209927 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.426213980 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.426234007 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.426254034 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.426753044 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.426770926 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.426841021 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.426848888 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.426892042 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.429893017 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.429924011 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.429963112 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.429968119 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.429990053 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.430017948 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.430582047 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.430598021 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.430632114 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.430636883 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.430654049 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.430676937 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.431282043 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.431318998 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.431344032 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.431349039 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.431391954 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.450402021 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.450449944 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.450465918 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.450479031 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.450516939 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.450901985 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.450951099 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.450962067 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.450968981 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.450997114 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.450998068 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.451014996 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.451014996 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.451141119 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.451145887 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.451195002 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.451412916 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.451435089 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.451486111 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.451493025 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.451545000 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452007055 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452023029 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452101946 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452107906 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452147007 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452287912 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452302933 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452348948 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452353001 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452385902 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452404976 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452680111 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452696085 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452737093 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452743053 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452768087 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452788115 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452919006 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452934027 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.452992916 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.452997923 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.453035116 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.469419003 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.469449997 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.469486952 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.469496012 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.469520092 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.469526052 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.511962891 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.511981010 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.512027025 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.512032032 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.512092113 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.512265921 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.512283087 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.512331963 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.512336016 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.512377024 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.513212919 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513230085 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513283014 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.513287067 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513331890 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.513561010 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513576984 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513612986 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.513617039 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513660908 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.513920069 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513952017 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513963938 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.513967991 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.513998032 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514015913 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514260054 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.514309883 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.514350891 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514350891 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514357090 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.514370918 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514394999 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514550924 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.514568090 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.514622927 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514627934 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.514653921 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.514676094 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.538000107 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.538026094 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.538122892 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.538137913 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.538192034 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.538552999 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.538568974 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.538603067 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.538606882 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.538645983 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.538969040 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.538990021 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539021015 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539026976 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539053917 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539072037 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539464951 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539482117 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539542913 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539549112 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539583921 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539810896 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539825916 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539875984 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539881945 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539887905 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539896965 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539930105 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539930105 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539937973 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.539958954 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.539982080 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.540177107 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.540193081 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.540234089 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.540239096 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.540266037 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.540287971 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.540602922 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.540617943 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.540677071 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.540683031 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.540720940 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.540946007 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.540960073 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541009903 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.541016102 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541146040 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541161060 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541204929 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.541209936 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541227102 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.541244984 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.541471958 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541486025 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541541100 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.541547060 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.541589975 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.543365002 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543379068 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543416977 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.543421984 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543473959 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.543680906 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543697119 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543726921 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.543735981 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543756962 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.543776035 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.543926001 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543941975 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.543972015 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.543976068 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.544013023 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.544770956 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.544790030 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.544852018 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.544857979 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.545026064 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.598709106 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.598735094 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.598768950 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.598774910 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.598838091 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.599152088 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.599168062 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.599224091 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.599229097 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.599271059 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.599834919 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.599864006 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.599942923 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.599948883 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600011110 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.600385904 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600402117 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600460052 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.600469112 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600514889 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.600728035 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600748062 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600783110 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.600785971 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600821972 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600836992 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.600871086 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.600874901 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600922108 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.600970984 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.617925882 CET	64297	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.617938042 CET	443	64297	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.624243975 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.624267101 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.624320030 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.624344110 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.624357939 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.624392986 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.625252008 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625267982 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625303984 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.625309944 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625333071 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.625345945 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.625569105 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625586987 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625644922 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.625650883 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625685930 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.625886917 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625901937 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625952005 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.625957966 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.625996113 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.626842022 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.626867056 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.626899958 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.626905918 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.626934052 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.626954079 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.627135992 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.627151012 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.627203941 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.627209902 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.627250910 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.627664089 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.627679110 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.627717018 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.627722025 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.627754927 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.627980947 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.627995014 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628026009 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628030062 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628062963 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628103971 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628587961 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628606081 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628638983 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628645897 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628684044 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628695965 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628798962 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628815889 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628861904 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628868103 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.628889084 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.628914118 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629247904 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629261971 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629300117 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629304886 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629340887 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629359007 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629471064 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629487038 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629528999 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629533052 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629554033 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629570007 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629776955 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629791975 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629838943 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629848003 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629884005 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629915953 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629931927 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.629976988 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.629987955 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.630064011 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.630091906 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.630106926 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.630142927 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.630148888 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.630175114 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.630189896 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.630620956 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.630635977 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.630682945 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.630687952 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.630718946 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.711539984 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.711563110 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.711641073 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.711658001 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.711694956 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.711787939 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.711802959 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.711844921 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.711850882 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.711899996 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.712316036 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.712331057 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.712390900 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.712397099 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.712435007 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.712665081 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.712680101 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.712723970 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.712729931 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.712766886 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.712980032 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.712995052 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713059902 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.713066101 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713108063 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.713288069 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713306904 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713351011 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.713356018 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713388920 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.713413000 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.713656902 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713671923 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713726044 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.713732004 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.713782072 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.715279102 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.715301037 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.715334892 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.715344906 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.715349913 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.715404987 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.715719938 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.715766907 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.715796947 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.715867043 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.723527908 CET	64296	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.723545074 CET	443	64296	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.759438992 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.759458065 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.759519100 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.759531975 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.759574890 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798089027 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798105955 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798154116 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798161983 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798187017 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798212051 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798412085 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798433065 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798485994 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798486948 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798504114 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798522949 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798542023 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798546076 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798592091 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:21.798616886 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.798638105 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.809989929 CET	64298	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:21.810004950 CET	443	64298	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.256902933 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.256939888 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.257033110 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.260878086 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.260904074 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.476706982 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.476758003 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.476931095 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.477922916 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.477936029 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.614722013 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.614763975 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.614902020 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.618386984 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.618401051 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.832003117 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.832062960 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.833359003 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.833365917 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.833676100 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.833726883 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.834541082 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.834598064 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.834709883 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.834753036 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.879343987 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.941673994 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.941704035 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.941721916 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.941737890 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.941746950 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:23.941776037 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:23.941819906 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.024333000 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.024367094 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.024395943 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.024401903 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.024425983 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.024449110 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.026248932 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.026268005 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.026335955 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.026340961 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.026380062 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.035574913 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.035669088 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.041399002 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.041419029 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.042351007 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.042426109 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.044461966 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.044533014 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.044600010 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.044631004 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.044639111 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.044676065 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.110801935 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.110826969 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.110892057 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.110898018 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.111613989 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.112382889 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.112411976 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.112467051 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.112469912 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.112510920 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.113379955 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.113394976 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.113461971 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.113466024 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.113506079 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.115178108 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.115195036 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.115259886 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.115264893 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.115331888 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.178973913 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.179033995 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.190437078 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.190442085 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.191509962 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.191570044 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.193428993 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.193490028 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.193557024 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.193562031 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.193609953 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.193727970 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.199451923 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.199491978 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.199517965 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.199523926 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.199568987 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.200742006 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.200759888 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.200838089 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.200844049 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.200880051 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.201819897 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.201838017 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.201884985 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.201889038 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.201920986 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.201936960 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.203731060 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.203773975 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.203814983 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.203819990 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.203867912 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.204684019 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.204705000 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.204739094 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.204744101 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.204790115 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.206113100 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.206132889 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.206188917 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.206193924 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.206219912 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.206235886 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.235346079 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.259870052 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.259888887 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.259994984 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.260001898 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.260045052 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.296837091 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.296863079 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.296941042 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.296974897 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.297019958 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.298126936 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.298134089 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.298187017 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.298190117 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.298202038 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.298235893 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.311285019 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.311320066 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.311362982 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.311376095 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.311403036 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.311424971 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.311697960 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.311723948 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.311754942 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.311759949 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.311786890 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.311806917 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.312067032 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.312086105 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.312124014 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.312127113 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.312163115 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.316035032 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316050053 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316131115 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.316135883 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316174030 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.316226959 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316248894 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316276073 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.316279888 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316298962 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.316313028 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.316726923 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316761971 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316785097 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.316787958 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.316828966 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.317121983 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.317146063 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.317178965 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.317183018 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.317205906 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.317222118 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.364471912 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.364492893 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.364506960 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.364593029 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.364623070 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.364635944 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.364670038 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.388243914 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.388355970 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.388386965 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.388436079 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.389213085 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.389295101 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.389305115 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.389343977 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.389972925 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.390048027 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.390054941 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.390103102 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.390845060 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.390933037 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.390944004 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.390983105 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.401381969 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401411057 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401463032 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.401479959 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401504040 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.401527882 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.401705027 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401720047 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401767969 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.401772022 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401844025 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401890039 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.401895046 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.401930094 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.401937962 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.402138948 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.402143955 CET	443	64300	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.402153015 CET	64300	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.450647116 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.450670958 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.450711966 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.450728893 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.450743914 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.450771093 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.453134060 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.453150034 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.453191042 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.453195095 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.453223944 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.453241110 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.474638939 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.474713087 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.474741936 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.474790096 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.475240946 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.475287914 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.475296021 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.475328922 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.475490093 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.475538969 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.475545883 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.475583076 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.476103067 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.476150036 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.476161003 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.476198912 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.476246119 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.476291895 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.476298094 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.476346016 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.476988077 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.477129936 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.477137089 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.477220058 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.477605104 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.477650881 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.477657080 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.477691889 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.478399992 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.478451014 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.478456974 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.478529930 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.536681890 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.536699057 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.536747932 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.536760092 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.536783934 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.536798000 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.537852049 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.537867069 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.537906885 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.537910938 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.537939072 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.537955999 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.539729118 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.539748907 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.539787054 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.539792061 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.539815903 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.539839029 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.562592983 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.562665939 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.562701941 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.562827110 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.563848019 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.563925982 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.563935995 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.563977003 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564048052 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564111948 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564117908 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564157009 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564260006 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564310074 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564316988 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564353943 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564513922 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564567089 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564573050 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564583063 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564614058 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564620018 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564645052 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564670086 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564718008 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564769983 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.564776897 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.564814091 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.565037966 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.565133095 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.565140963 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.565176964 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.567446947 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.567543983 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.567564011 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.567605972 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.567625999 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.567682981 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.567692041 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.567740917 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.567822933 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.567884922 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.567894936 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.567964077 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568067074 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568118095 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568125963 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568187952 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568223000 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568276882 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568286896 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568329096 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568346977 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568389893 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568398952 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568434954 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568469048 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568516970 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.568526983 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.568563938 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.616806030 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.616826057 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.616877079 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.616889954 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.616900921 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.617902994 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.623478889 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.623528004 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.623539925 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.623554945 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.623575926 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.623595953 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.624382973 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.624397039 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.624470949 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.624476910 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.624562025 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.625201941 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.625219107 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.625250101 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.625255108 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.625279903 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.625300884 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.626183033 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.626198053 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.626264095 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.626270056 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.626310110 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.627233028 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.627247095 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.627315998 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.627320051 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.627358913 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.628050089 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.628062963 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.628129959 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.628135920 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.628184080 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.650849104 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.650914907 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.650948048 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.650984049 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651040077 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651093960 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651104927 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651163101 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651209116 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651218891 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651262999 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651339054 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651390076 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651400089 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651432037 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651484013 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651535988 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651545048 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651598930 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651717901 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651777029 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651784897 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651827097 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651871920 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651922941 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651922941 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651938915 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.651978016 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.651987076 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652116060 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652163029 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652173996 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652209997 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652283907 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652332067 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652339935 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652376890 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652590990 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652631044 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652636051 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652645111 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652676105 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652684927 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652723074 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652882099 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652919054 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652949095 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.652957916 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.652982950 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.653053999 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.653184891 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.653232098 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.653239012 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.653248072 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.653275013 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.653292894 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.653299093 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.653337002 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.703778982 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.703794003 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.703840017 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.703846931 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.703881979 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.703897953 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.710280895 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.710294008 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.710357904 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.710362911 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.710407972 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.710743904 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.710761070 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.710794926 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.710799932 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.710839987 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.711415052 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.711430073 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.711499929 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.711505890 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.711546898 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.711677074 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.711690903 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.711724997 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.711730003 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.711756945 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.711776018 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.715151072 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.715167046 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.715256929 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.715256929 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.715262890 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.715316057 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.715692997 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.715707064 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.715771914 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.715776920 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.715837955 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738022089 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738118887 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738162994 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738203049 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738214016 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738250971 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738261938 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738276958 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738301039 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738321066 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738513947 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738567114 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738578081 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738584995 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738610983 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738630056 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738862991 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738913059 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738923073 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738934040 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738971949 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.738981009 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.738993883 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.739013910 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.739125967 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.739173889 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.739176035 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.739187002 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.739223957 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.739233017 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.739404917 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.739464045 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.739475012 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.739511013 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.741070032 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.741133928 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.741151094 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.741190910 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.741485119 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.741540909 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.741544008 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.741584063 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.741764069 CET	64301	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.741787910 CET	443	64301	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.790281057 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.790297031 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.790389061 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.790397882 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.790440083 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.796689987 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.796713114 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.796781063 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.796786070 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.796823978 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.796832085 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797152996 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797168016 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797210932 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797216892 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797255039 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797306061 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797504902 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797518969 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797566891 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797571898 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797614098 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797765017 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797777891 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797817945 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797821045 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.797852039 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.797858953 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.798151970 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.798167944 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.798203945 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.798208952 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.798228979 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.798252106 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.798407078 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.798420906 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.798470020 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.798475027 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.798511982 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.799001932 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.799051046 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.799069881 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.799074888 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.799129963 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.877003908 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.877023935 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.877124071 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.877130985 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.877171993 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.883389950 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.883404970 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.883446932 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.883451939 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.883490086 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.883768082 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.883781910 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.883809090 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.883843899 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.883850098 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.883898020 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884037971 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884052038 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884114981 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884120941 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884154081 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884358883 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884371996 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884418011 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884423971 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884445906 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884464979 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884576082 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884591103 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884635925 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884640932 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884676933 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884836912 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884850979 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884900093 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.884905100 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.884943008 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.885195017 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.885207891 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.885231018 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.885235071 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.885283947 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.885292053 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.963782072 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.963803053 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.963886976 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.963896990 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.963951111 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.970158100 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.970171928 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.970227003 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.970231056 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.970268965 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.970619917 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.970634937 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.970686913 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.970691919 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.970731974 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971009970 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971023083 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971152067 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971158028 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971239090 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971241951 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971249104 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971296072 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971302032 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971328974 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971342087 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971364021 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971602917 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971616983 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971676111 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971682072 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971720934 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971802950 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971839905 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971854925 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971862078 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971893072 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971896887 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:24.971911907 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.971945047 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.973105907 CET	64302	443	192.168.2.25	150.171.27.10
Jan 7, 2025 18:03:24.973118067 CET	443	64302	150.171.27.10	192.168.2.25
Jan 7, 2025 18:03:26.248477936 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:26.248522997 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:26.248584032 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:26.249233007 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:26.249250889 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:27.101811886 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:27.102123976 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:27.102143049 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:27.103250027 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:27.103317976 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:27.109280109 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:27.109349012 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:27.213181019 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:27.213196993 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:27.313147068 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:37.000540972 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:37.000634909 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:37.000701904 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:37.540652037 CET	64303	443	192.168.2.25	142.250.186.164
Jan 7, 2025 18:03:37.540695906 CET	443	64303	142.250.186.164	192.168.2.25
Jan 7, 2025 18:03:42.405458927 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:42.405514956 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:42.407959938 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:42.410851002 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:42.410862923 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:43.069402933 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:43.069468975 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:43.071176052 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:43.071182966 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:43.072326899 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:43.072390079 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:43.078489065 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:43.078576088 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:43.078639030 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:43.078660011 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:43.078697920 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:43.105520010 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:43.151334047 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.025464058 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.025496960 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.025513887 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.025554895 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.025567055 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.025585890 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.025641918 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.119379044 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.119407892 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.119446993 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.119456053 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.119504929 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.122095108 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.122159958 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.137000084 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.137020111 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.137057066 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.137062073 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.137109041 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.200105906 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.200280905 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.201350927 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.201411009 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.201421022 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.201426029 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.201472998 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.210027933 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.210046053 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.210092068 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.210098028 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.210156918 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.232971907 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.232997894 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.233031034 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.233036995 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.233073950 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.233093977 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.293339014 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.293359995 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.293425083 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.293431997 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.293492079 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.294100046 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.294115067 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.294186115 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.294190884 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.294235945 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.294816971 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.294863939 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.298979998 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.298996925 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.299030066 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.299034119 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.299082041 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.331804037 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.331851959 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.331906080 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.331912994 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.331964970 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.331995010 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.343543053 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.343607903 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.365637064 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.365653038 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.365696907 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.365703106 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.365732908 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.365778923 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.365786076 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.365838051 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.366269112 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.366297960 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.366332054 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.366339922 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.366358042 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.366391897 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.387260914 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.387276888 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.387320995 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.387336969 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.387341976 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.387389898 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.387697935 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.387736082 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.387748003 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.387753963 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.387779951 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.387799025 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.388976097 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.388993025 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.389050961 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.389055967 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.389101982 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.389106035 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.389112949 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.389151096 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.402028084 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.402046919 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.402127981 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.402134895 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.402199030 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.420080900 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.420141935 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.420146942 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.420207024 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.420236111 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.420284986 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.420361996 CET	64304	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.420373917 CET	443	64304	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.521955967 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.521984100 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:44.526316881 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.528983116 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:44.528995991 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.151696920 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.151892900 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.153201103 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.153209925 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.154278994 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.154500961 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.162131071 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.162204981 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.164747000 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.164834976 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.164841890 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.164949894 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.419619083 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.419647932 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.419743061 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.419743061 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.419755936 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.419912100 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.420783997 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.421957016 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.421957016 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:45.421967030 CET	443	64305	2.23.227.197	192.168.2.25
Jan 7, 2025 18:03:45.423787117 CET	64305	443	192.168.2.25	2.23.227.197
Jan 7, 2025 18:03:52.291709900 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.291749001 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.291932106 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.292880058 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.292895079 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.688437939 CET	59714	443	192.168.2.25	184.28.90.27
Jan 7, 2025 18:03:52.693664074 CET	443	59714	184.28.90.27	192.168.2.25
Jan 7, 2025 18:03:52.693768978 CET	59714	443	192.168.2.25	184.28.90.27
Jan 7, 2025 18:03:52.799361944 CET	59716	80	192.168.2.25	192.229.221.95
Jan 7, 2025 18:03:52.799485922 CET	59715	443	192.168.2.25	20.190.160.17
Jan 7, 2025 18:03:52.804482937 CET	80	59716	192.229.221.95	192.168.2.25
Jan 7, 2025 18:03:52.804614067 CET	59716	80	192.168.2.25	192.229.221.95
Jan 7, 2025 18:03:52.804738998 CET	443	59715	20.190.160.17	192.168.2.25
Jan 7, 2025 18:03:52.804968119 CET	59715	443	192.168.2.25	20.190.160.17
Jan 7, 2025 18:03:52.907020092 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.907181025 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.908833027 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.908844948 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.909758091 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.909897089 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.911206007 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.911274910 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.911401033 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.911417007 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.911534071 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.911534071 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.911681890 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.911722898 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.912204027 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.912247896 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.912345886 CET	443	64308	20.42.73.30	192.168.2.25
Jan 7, 2025 18:03:52.912360907 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:52.912615061 CET	64308	443	192.168.2.25	20.42.73.30
Jan 7, 2025 18:03:53.822453022 CET	59717	443	192.168.2.25	184.28.90.27
Jan 7, 2025 18:03:53.827510118 CET	443	59717	184.28.90.27	192.168.2.25
Jan 7, 2025 18:03:53.827565908 CET	59717	443	192.168.2.25	184.28.90.27
Jan 7, 2025 18:03:56.819953918 CET	443	49719	2.16.158.75	192.168.2.25
Jan 7, 2025 18:03:56.820069075 CET	49719	443	192.168.2.25	2.16.158.75
Jan 7, 2025 18:03:56.820111990 CET	443	49719	2.16.158.75	192.168.2.25
Jan 7, 2025 18:03:56.820215940 CET	49719	443	192.168.2.25	2.16.158.75
Jan 7, 2025 18:03:56.820311069 CET	49719	443	192.168.2.25	2.16.158.75
Jan 7, 2025 18:03:56.825057983 CET	443	49719	2.16.158.75	192.168.2.25
Jan 7, 2025 18:04:18.188797951 CET	49675	443	192.168.2.25	20.198.119.84
Jan 7, 2025 18:04:18.188860893 CET	443	49675	20.198.119.84	192.168.2.25

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 18:02:23.299738884 CET	53	63602	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:23.327301025 CET	53	59979	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:23.900377035 CET	49997	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:02:23.902844906 CET	61289	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:02:23.915682077 CET	53	49997	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:23.918230057 CET	56693	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:02:23.918477058 CET	64069	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:02:23.920053959 CET	53	61289	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:23.927081108 CET	53	56693	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:24.188163042 CET	53	64069	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:24.553173065 CET	53	54361	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:26.190782070 CET	58050	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:02:26.190942049 CET	49168	53	192.168.2.25	1.1.1.1
Jan 7, 2025 18:02:26.197597027 CET	53	49168	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:26.197613001 CET	53	58050	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:26.465728045 CET	53	64801	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:26.894054890 CET	53	55932	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:43.855714083 CET	53	56759	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:50.862528086 CET	53	61755	1.1.1.1	192.168.2.25
Jan 7, 2025 18:02:59.386399984 CET	138	138	192.168.2.25	192.168.2.255
Jan 7, 2025 18:03:02.754364014 CET	53	58834	1.1.1.1	192.168.2.25
Jan 7, 2025 18:03:19.932123899 CET	53	60930	1.1.1.1	192.168.2.25
Jan 7, 2025 18:03:23.010639906 CET	53	62764	1.1.1.1	192.168.2.25
Jan 7, 2025 18:03:25.186043978 CET	53	55166	1.1.1.1	192.168.2.25
Jan 7, 2025 18:03:56.104234934 CET	53	49783	1.1.1.1	192.168.2.25

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 7, 2025 18:02:24.188225985 CET	192.168.2.25	1.1.1.1	c232	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 18:02:23.900377035 CET	192.168.2.25	1.1.1.1	0xa88	Standard query (0)	tekascend.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 18:02:23.902844906 CET	192.168.2.25	1.1.1.1	0xc6a2	Standard query (0)	tekascend.com	65	IN (0x0001)	false
Jan 7, 2025 18:02:23.918230057 CET	192.168.2.25	1.1.1.1	0xcff1	Standard query (0)	tekascend.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 18:02:23.918477058 CET	192.168.2.25	1.1.1.1	0x6f9a	Standard query (0)	tekascend.com	65	IN (0x0001)	false
Jan 7, 2025 18:02:26.190782070 CET	192.168.2.25	1.1.1.1	0xafe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 18:02:26.190942049 CET	192.168.2.25	1.1.1.1	0xdf64	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 18:02:23.915682077 CET	1.1.1.1	192.168.2.25	0xa88	No error (0)	tekascend.com	166.1.209.92	A (IP address)	IN (0x0001)	false
Jan 7, 2025 18:02:23.927081108 CET	1.1.1.1	192.168.2.25	0xcff1	No error (0)	tekascend.com	166.1.209.92	A (IP address)	IN (0x0001)	false
Jan 7, 2025 18:02:26.197597027 CET	1.1.1.1	192.168.2.25	0xdf64	No error (0)	www.google.com		65	IN (0x0001)	false
Jan 7, 2025 18:02:26.197613001 CET	1.1.1.1	192.168.2.25	0xafe	No error (0)	www.google.com	142.250.186.164	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

tekascend.com

https:

assets.msn.com

otelrules.svc.static.microsoft

res.public.onecdn.static.microsoft

tse1.mm.bing.net

browser.events.data.msn.cn

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.25	59725	166.1.209.92	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:02:24 UTC	663	OUT	GET / HTTP/1.1 Host: tekascend.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-07 17:02:24 UTC	170	IN	HTTP/1.1 403 Forbidden Server: nginx/1.26.2 Date: Tue, 07 Jan 2025 17:02:24 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 279 Connection: close
2025-01-07 17:02:24 UTC	279	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 74 65 6b 61 73 63 65 6e 64 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at tekascend.com Port 443</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.25	59726	166.1.209.92	443	6088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:02:25 UTC	589	OUT	GET /favicon.ico HTTP/1.1 Host: tekascend.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tekascend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-07 17:02:25 UTC	170	IN	HTTP/1.1 404 Not Found Server: nginx/1.26.2 Date: Tue, 07 Jan 2025 17:02:25 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 276 Connection: close
2025-01-07 17:02:25 UTC	276	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 74 65 6b 61 73 63 65 6e 64 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at tekascend.com Port 443</add

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.25	59730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:02:38 UTC	222	OUT	GET /rules/officeclicktorun.exe-Production-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro) Host: otelrules.svc.static.microsoft
2025-01-07 17:02:39 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 17:02:39 GMT Content-Type: text/plain Content-Length: 375299 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 06 Jan 2025 13:21:41 GMT ETag: "0x8DD2E550F264F44" x-ms-request-id: f99bdd82-301e-003f-06b2-60266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250107T170238Z-156796c549bmmm82hC1EWRpr7w00000012b0000000004exp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-01-07 17:02:39 UTC	15892	IN	Data Raw: 31 32 30 31 30 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 Data Ascii: 120100v3+<?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 31 36 22 20 49 3d 22 31 32 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 4f 66 66 69 63 65 4d 69 6e 6f 72 56 65 72 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 4f 66 66 69 63 65 56 65 72 73 69 6f 6e 4d 69 6e 6f 72 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 33 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 41 70 70 53 74 61 74 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 41 70 70 53 74 61 74 65 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 34 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 4f 66 66 69 63 65 4d 75 69 43 6f 75 6e Data Ascii: </C> <C T="U16" I="12" O="true" N="OfficeMinorVer"> <S T="1" F="OfficeVersionMinor" M="Ignore" /> </C> <C T="U32" I="13" O="true" N="AppState"> <S T="1" F="AppState" M="Ignore" /> </C> <C T="U32" I="14" O="true" N="OfficeMuiCoun
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 54 3d 22 32 22 20 46 3d 22 4d 61 74 63 68 65 64 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 32 30 36 33 38 76 30 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d Data Ascii: T="2" F="Matched" M="Ignore" /> </C> <C T="W" I="1" O="false"> <S T="1" F="1" M="Ignore" /> </C> <T> <S T="1" /> </T></R><$!#>120638v0+<?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns="">
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: rsion="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 34 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 53 65 76 65 72 69 74 79 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 55 4c 53 5f 53 65 76 65 72 69 74 79 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 35 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 4d 65 73 73 61 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 6e 74 65 78 74 44 61 74 61 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 36 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 53 51 4d 4d 61 63 68 69 6e 65 49 44 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 4d 61 63 68 69 6e 65 Data Ascii: <C T="W" I="4" O="true" N="Severity"> <S T="5" F="ULS_Severity" M="Ignore" /> </C> <C T="W" I="5" O="true" N="Message"> <S T="5" F="ContextData" M="Ignore" /> </C> <C T="W" I="6" O="true" N="SQMMachineID"> <S T="5" F="Machine
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 35 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 45 72 72 6f 72 4d 65 73 73 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 36 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 72 72 6f 72 44 65 74 61 69 6c 73 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 45 72 72 6f 72 44 65 74 61 69 6c 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 31 37 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 53 63 65 6e 61 72 69 6f 53 75 62 54 79 70 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 53 63 65 6e 61 72 69 6f 53 75 Data Ascii: <C T="W" I="15" O="false" N="ErrorMessage"> <S T="2" F="ErrorMessage" /> </C> <C T="W" I="16" O="false" N="ErrorDetails"> <S T="2" F="ErrorDetails" /> </C> <C T="W" I="17" O="true" N="ScenarioSubType"> <S T="2" F="ScenarioSu
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4e 45 22 3e 0d 0a 20 Data Ascii: </R> </O> </R> </O> </L> <R> <O T="AND"> <L> <O T="NE">
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4e 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 55 4c 53 5f Data Ascii: </R> </O> </L> <R> <O T="NE"> <L> <S T="1" F="ULS_
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4e 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 55 4c 53 5f 54 61 67 22 20 2f Data Ascii: <O T="AND"> <L> <O T="AND"> <L> <O T="NE"> <L> <S T="1" F="ULS_Tag" /
2025-01-07 17:02:39 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 45 76 65 6e 74 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 39 31 22 20 54 3d 22 55 38 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4e 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <O T="LT"> <L> <S T="1" F="EventSamplingPolicy" /> </L> <R> <V V="191" T="U8" /> </R> </O> </L> <R> <O T="NE">

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.25	59731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:02:40 UTC	199	OUT	GET /rules/rule120607v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro) Host: otelrules.svc.static.microsoft
2025-01-07 17:02:40 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 17:02:40 GMT Content-Type: text/xml Content-Length: 204 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6C8527A" x-ms-request-id: 25e036d3-401e-00ac-4306-610a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20250107T170240Z-156796c549bnw5nxhC1EWRp38s000000126g00000000da8r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-01-07 17:02:40 UTC	204	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 37 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 45 52 3d 22 31 32 30 36 30 33 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 62 70 7a 73 22 20 41 3d 22 39 34 30 74 63 20 39 78 35 6a 73 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120607" V="1" DC="SM" T="Subrule" ER="120603" xmlns=""> <S> <UTS T="1" Id="bbpzs" A="940tc 9x5js" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.25	59732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:02:40 UTC	199	OUT	GET /rules/rule120603v9s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.18129; Pro) Host: otelrules.svc.static.microsoft
2025-01-07 17:02:40 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 07 Jan 2025 17:02:40 GMT Content-Type: text/xml Content-Length: 2231 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B99C0CEBF" x-ms-request-id: cff3274b-101e-0079-090a-615913000000 x-ms-version: 2018-03-28 x-azure-ref: 20250107T170240Z-156796c549bmmm82hC1EWRpr7w000000128g000000009ep7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-01-07 17:02:40 UTC	2231	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 33 22 20 56 3d 22 39 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 64 64 69 74 69 6f 6e 61 6c 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 45 3d 22 66 61 6c 73 65 22 20 44 4c 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120603" V="9" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAdditional" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" E="false" DL=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.25	59743	2.16.168.105	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:20 UTC	399	OUT	GET /creativeservice/2d863f0f-0fd5-72db-6971-f905df03ef53_3255140379518978990_128000000004796009_assets__image_1709055739600.jpg HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631 Host: res.public.onecdn.static.microsoft Connection: Keep-Alive
2025-01-07 17:03:20 UTC	1293	IN	HTTP/1.1 200 OK Content-Type: text/plain Last-Modified: Thu, 12 Dec 2024 01:09:10 GMT x-ms-request-id: aaaaf9e2-d01e-0020-021e-5b8430000000 Cache-Control: max-age=630720000 Date: Tue, 07 Jan 2025 17:03:20 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" Content-Length: 2495 Connection: close Akamai-Request-BC: [a=2.17.44.86,b=3565041315,c=g,n=DE_HE_FRANKFURT,o=20940] AK-Network: FF Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=FRANKFURT&ASN=20940&Country=DE&Region=HE&RequestIdentifier=0.562c1102.1736269400.d47e36a3&TotalRTCDNTime=86&CompressionType=gzip&FileSize=2149"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=86, clienttt; dur=, origin; dur=0 , cdntime; dur=0 Akamai-Cache-Status: Hit from child Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai
2025-01-07 17:03:20 UTC	2495	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 40 00 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC@@}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.25	64297	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:21 UTC	375	OUT	GET /th?id=OADD2.10239399456844_1JJWL84ZWYQ0EIU0Z&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-01-07 17:03:21 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 429617 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C78169E336624444AD710FB9622FC49A Ref B: EWR30EDGE0321 Ref C: 2025-01-07T17:03:21Z Date: Tue, 07 Jan 2025 17:03:20 GMT Connection: close
2025-01-07 17:03:21 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 31 30 3a 30 37 20 32 31 3a 34 38 3a 32 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.4 (Windows)2024:10:07 21:48:298C
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: b5 5f 10 5f 7d 87 44 d3 a6 bd 9f fe 99 ff 00 ec cd 5e d5 f0 f7 e0 2d ad b8 8e f7 c6 97 bf 68 7f bf fd 9b 65 ff 00 b3 49 5e ad a1 e9 1a 55 8d d4 76 ba 55 9c 3a 75 8c 7f f2 ed 6d f2 7c df ed 57 e3 5c 4f e3 36 59 81 52 a5 95 47 db 54 db 99 dd 41 7c f7 7f 2f bc fd 37 23 f0 d7 13 5a d5 73 09 f2 47 7e 55 bf df b2 fc 4f 20 f8 67 f0 2e 03 fe 9b e2 eb cf b4 3c 72 7f c7 8d b7 fa 9f f8 14 9f c5 5e d7 a6 d8 e9 ba 56 9f 1d 96 91 a6 da 59 5a c7 fe ae 38 a2 d9 4d 93 cc f3 b6 27 fb 75 73 6c 75 fc f7 9f f1 66 71 9f d5 73 c7 d6 6d 74 8a d2 2b d2 3f ab bb f3 3f 58 cb 72 6c 06 5b 4d 53 c2 53 51 f3 ea fd 5f 50 f9 de 9d 1c 71 a7 fd 74 92 a3 91 b6 7d ca af 3c bf bd af 95 96 c7 a8 5d 91 bf 81 2a ba 36 ca 82 79 e4 a8 63 6d df f7 f2 b2 7b 82 43 f4 67 ff 00 89 25 b2 7f d3 3a 7d f5 Data Ascii: __}D^-heI^UvU:um\|W\O6YRGTA\|/7#ZsG~UO g.<r^VYZ8M'uslufqsmt+??Xrl[MSSQ_Pqt}<]*6ycm{Cg%:}
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 71 c7 ff 00 2c e2 fb 95 f9 0f 10 f8 b7 87 a6 9d 1c a6 9f 34 bf 9e 4a d1 f5 4b 77 f3 b7 a3 3f 51 c8 fc 34 9b b5 5c ca 76 fe ec 77 f9 cb f4 5f 79 e4 1e 15 d3 6d 1f e3 f6 af e1 ed 4a 08 6f 20 b6 d1 74 ab 4b 98 e5 8b e4 9f ca 87 fb bf 5a f6 49 16 3f 26 34 ff 00 57 1c 7f ea e3 8b ee 57 8f f8 4e 5d ff 00 b5 9f 89 ff 00 eb 95 b4 7f f9 06 bd 76 78 a4 7a fc 47 34 c4 55 ad 5a f3 95 ee a1 2f 2b b8 ab e9 fd 74 3f 58 c1 d1 84 21 cb 15 6b 36 be 49 e8 55 8d a4 f2 7e 7f de 49 53 7e f2 9d 1c 5f b9 d9 45 79 2d d8 ee 3c 7f f6 b4 f0 b7 8a 75 ad 13 48 d5 3c 1b 77 2d 9d f5 94 9f 67 b9 92 da e9 e1 9a 48 a5 74 44 55 fe f7 cf 5d ef c3 7b 1d 5b 4a f0 7d 96 9f ad eb bf db b7 d6 fb e3 92 f7 fe 7a 6d fd 78 ff 00 6a aa fc 70 59 df e1 6e ac 96 53 4d 6f 3c 9f 66 8e 3b 98 bf e5 9b 35 cc Data Ascii: q,4JKw?Q4\vw_ymJo tKZI?&4WWN]vxzG4UZ/+t?X!k6IU~IS~_Ey-<uH<w-gHtDU]{[J}zmxjpYnSMo<f;5
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: c9 e4 ff 00 07 cb b7 7f fb 55 d0 c1 f6 4d 3e d2 38 2d 61 86 de 08 ff 00 e5 9c 55 4b 52 bc 91 eb 58 c5 b6 63 2b b5 ab 31 24 bc d7 65 f3 3c 8d 36 d2 cb f7 9f f2 f3 77 bd fe e7 fd 33 a8 34 ed 3f c4 3f d9 d1 c1 75 af 43 1f 97 1f fc bb 5a 7f ec cf 5a 91 b7 fa cf fa e9 53 c1 fe ba ba 79 74 31 b2 65 3f ec a9 3c 9f f4 ad 63 50 b8 ff 00 b6 bb 3f f4 0a a5 a5 78 5f 45 b2 b4 8e 04 b3 f3 3c bf f5 72 5c ca ef 5b 32 35 45 51 62 9a 56 bd 88 a3 d3 ec 22 96 3d 96 76 9f bb 93 cc 8f f7 5f c7 56 a4 97 7d 45 1d 0f fe ba 98 ae 3e 46 aa 93 cb ff 00 12 f9 1f fe 99 bd 58 9f e4 87 e7 fd dd 61 eb 9a e6 8b a7 e9 f7 3f 6a d6 2d 23 93 fe 79 f9 bf 3d 17 48 4e 49 6e 6f 6d d9 ff 00 7e ea 09 ff 00 d7 56 26 a3 e3 df 09 db fd fd 63 cc ff 00 ae 51 56 0e a5 f1 53 c3 cb 2f ee 21 bb b8 a1 4a 29 Data Ascii: UM>8-aUKRXc+1$e<6w34??uCZZSyt1e?<cP?x_E<r\[25EQbV"=v_V}E>FXa?j-#y=HNInom~V&cQVS/!J)
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: bd 9b cc 93 fe 7a 5c ff 00 f1 ba a5 75 e2 c9 2d 21 91 34 4b 3f fb 79 96 2f fd 02 3a e5 fe d0 ad 5a ea 84 3e 6f 44 6f 2c 0e 1e 8f f1 a7 f2 ea 72 ff 00 f0 af b5 a7 87 cf bd d4 b4 fb 78 23 ff 00 96 9f c1 59 77 7a 1d a5 bf c9 6b a9 7d b1 ff 00 e7 a4 76 9b 13 ff 00 1e fb d5 ad aa dc dd ea 17 7b f5 49 a6 91 e4 ff 00 9e 9f fc 4f f0 d3 76 46 9f 7e 6f 2e 3a eb a2 eb ef 52 77 f4 d0 f3 eb ce 8b d2 8c 3e 6d ea 61 c9 a6 40 9f f3 da a4 fe c3 81 fb 4d ff 00 7f 6b 62 3f b2 27 fd 34 a7 49 fe a7 e4 86 ba d4 ae f4 39 55 fa 98 d0 68 76 09 f7 21 ff 00 c8 b5 76 3d 3e 08 be e4 30 ff 00 df aa bf 03 48 9f 27 93 ff 00 6d 28 fb 62 24 db 1e 1a 77 61 a9 e9 bf 08 5a 3b 8f 04 44 9f f3 e5 72 f6 f2 7f e8 4b 59 9f 1a 6c e3 f2 6d b5 1f f9 e7 fe 8f 2f fe c9 49 f0 33 50 82 ef 5b bd d1 3f d5 Data Ascii: z\u-!4K?y/:Z>oDo,rx#Ywzk}v{IOvF~o.:Rw>ma@Mkb?'4I9Uhv!v=>0H'm(b$waZ;DrKYlm/I3P[?
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: b8 f2 ef 53 8e 7f e5 a7 ff 00 67 47 fc 7e 76 ff 00 4a 3d 0f fc fc 7f f6 54 7c f7 f0 ec 7f dd de a7 4f fa 6f ff 00 d9 8a 6a b7 db ff 00 78 38 ba 4f fc 8f ff 00 d9 57 6a 9d b5 bd b9 7b 6b c8 df 5f 3a 72 f9 5b e5 ee f0 38 5f 4f 8b 9b 4b 3f b5 6f b2 fb 54 8f 47 d7 f3 ad b7 9c 8a 4a b9 ff 00 1f fc 8f f8 fa ff 00 d1 ff 00 fd 9f f3 aa 9b bb 8a f6 30 f8 85 3f 72 4a d3 5b af c9 ae e9 f4 7f a9 e0 e2 b0 be ce d3 83 bc 1e cf f4 7d 9a 12 8a 23 6a 92 ba 8e 2e 82 6c a5 a7 53 b6 d5 72 93 cc c8 a3 a3 65 4b b6 8d b4 f9 50 b9 d9 16 ca 65 4d b4 d1 b6 a7 91 8f 98 86 9f b2 9f b6 8d b5 01 cc 14 e8 e9 a9 52 46 bb ea e3 64 c8 65 89 20 93 f8 0d 5a d3 5a 4f e3 ff 00 59 4c b5 59 13 fe 9a 47 5a b6 b0 47 2d 67 52 a5 96 a7 a1 85 c3 f3 3b c4 db d2 a2 fe d5 b5 f2 1f fe 3e a3 ff 00 57 ff Data Ascii: SgG~vJ=T\|Oojx8OWj{k_:r[8_OK?oTGJ0?rJ[}#j.lSreKPeMRFde ZZOYLYGZG-gR;>W
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 0c d5 f2 b8 7d f9 4f a2 ad 66 90 fb 16 f2 a6 a7 ba ef 9b ff 00 69 d6 57 9e ef 77 73 fb ef f5 7f ea ab 72 c6 28 2e f4 f8 e7 f3 bf d6 45 e6 57 7c 74 38 e5 b9 c0 78 ff 00 41 fb 5d a6 a5 a2 79 3f b8 bd b6 78 ed a4 ff 00 6f ef 27 fe 3d 5f 38 c6 9f be 8f fe 59 c9 ff 00 2d 2b ec 8d 57 4f 8e e2 1d 8f 37 ef 23 fd e4 72 7f b7 5f 30 fc 54 d0 ff 00 b2 be 21 6a 56 5e 4f 97 07 99 e7 c7 fe ec bf 35 7d 26 59 8a 53 83 8b dd 1e 16 37 0f cb 2e 68 ec 73 bb a3 97 f7 09 ff 00 2c e9 2d 20 d9 37 c9 5a b6 36 36 e9 0f 9e ff 00 bc 4f fc 72 ad 5a ac f2 cd fb bb 3f dc 7f cf 3f e0 ae 99 56 e8 8e 7e 5b 2b b3 23 47 d2 a4 d5 7c 4d 6d a7 41 ff 00 2f b2 7f fb 55 f4 16 dd f0 ec 7f f9 67 1f 97 1f fc 06 b8 8f 84 fa 54 6f ae 49 a8 49 0f fc 79 47 e5 c7 fe fb d7 a2 41 06 ff 00 fa e7 5e 06 6b 88 Data Ascii: }OfiWwsr(.EW\|t8xA]y?xo'=_8Y-+WO7#r_0T!jV^O5}&YS7.hs,- 7Z66OrZ??V~[+#G\|MmA/UgToIIyGA^k
2025-01-07 17:03:21 UTC	16067	IN	Data Raw: ff 00 db 3f 2f fb b5 91 02 ef ad 9f de 7f 67 e9 bf f5 d6 6f fd 0d 2b ce c6 d3 c3 d7 af 45 ce 37 69 bf fd 25 9e e6 53 53 15 87 a1 88 e4 95 af 15 ff 00 a5 c5 7e a5 8f 10 49 22 f8 37 44 b6 8e 6f dd c9 1d cc 92 47 fe df da 5e a9 69 4d b2 b5 f5 cb 49 ee bc 33 e1 78 6c 6c e5 b8 9e 4b 2b c9 22 b6 8b ef cf b6 e6 4f bb fe d5 64 5a 84 93 44 d3 75 4b 6b b8 ae 2d 75 18 9f cb fe fd bb 27 df 8e 45 fe 06 15 e5 64 f8 cc 05 3a 14 f0 71 9a 55 25 cc f9 7a fc 52 d7 ff 00 25 76 f4 3d 9c e3 07 98 4f 17 3c 63 8b 74 e2 a0 b9 ba 7c 31 fd 5f e2 74 1e 09 f1 96 b3 e1 8b a9 66 d1 ae e5 b7 79 63 f2 e5 f2 e9 fa 96 ab ab 78 b7 c4 3b 26 9b cc 9e e2 4f 32 4f 32 b9 cb 1b 59 ee f5 08 ed 53 fd 65 cc be 5c 75 e9 1e 1c d1 60 d3 3c b8 d3 fd 64 7b fc c9 2b 83 3b a9 82 c0 e2 3e b3 4a 11 fa cc a3 Data Ascii: ?/go+E7i%SS~I"7DoG^iMI3xllK+"OdZDuKk-u'Ed:qU%zR%v=O<ct\|1_tfycx;&O2O2YSe\u`<d{+;>J
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 96 9f eb 6a 5d b7 7e 77 c9 0f fe 45 a8 2e a2 92 2f 9d 21 f2 e4 ff 00 a6 b5 93 a8 98 b9 52 1d 24 7b 21 de 9f 6b 93 fe da d6 5d f5 f5 db fc 89 ff 00 91 22 4a 96 3d 2b cd f9 ee a1 ff 00 59 ff 00 2d 3c aa b9 6b a3 d8 5a 43 f2 43 ff 00 a1 d4 29 46 e2 b4 8c eb 5b 39 1e 1f df fd 92 39 3f eb 93 a5 4f 1d 9c 76 f3 7f cf 49 3f eb ad 5e be 5b 4b 7f 2d ee a6 9a 3f f9 e5 fd f9 3f dd 5a e8 ac 7c 1d 3c 5a 7d 96 a9 ab c3 34 76 ba ac 73 49 65 6d e6 fc fb 23 7d 8c cf b7 ee d7 4e 13 0d 5b 17 5a 34 68 af 79 ff 00 c3 fe 49 98 56 a9 4b 0f 4a 55 6a 7c 28 e6 6c 74 f9 35 09 7e 4b 3f fa e9 27 f0 7f df 55 b9 a7 78 7b 4d b7 9b cf ba ff 00 4c 93 fe 9a fd ca de fb 37 f0 7f cb 38 ff 00 d5 d4 53 a7 fc b3 8e bf 4a ca b8 67 07 83 b4 ea 7e f2 6b ab d9 7a 2d be fb 9f 15 98 67 58 8a e9 c6 9b Data Ascii: j]~wE./!R${!k]"J=+Y-<kZCC)F[99?OvI?^[K-??Z\|<Z}4vsIem#}N[Z4hyIVKJUj\|(lt5~K?'Ux{ML78SJg~kz-gX
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 7c 1f a4 27 9f ff 00 13 19 34 a9 a4 b2 cf fb 17 3f bc 92 4d dc 79 4a 9f eb 3f d8 af cc 73 bc 2b c1 d1 fa d4 54 a4 9c e4 9c 57 5b 36 b6 f2 b5 df 65 73 ec 70 32 a3 5a a2 8b 4a e9 26 9f ab b9 89 e3 8d 6a 4b bb b9 3f d3 3f ef ed 73 fe 19 d4 f5 6f ed 69 34 bd 3b 4d b4 d5 63 d5 76 47 73 a6 cb 17 ee 6e d6 3f bb bf fb 9b 3f e7 aa fd ca 93 c4 cd 27 88 3c 79 7d a7 69 1e 4d c3 c9 7a ff 00 66 fb 37 fa 9d 9f df 5f fa 67 5e 97 e0 3f 0e 41 e1 dd 3f 64 3f bc be b8 ff 00 8f 9b 9f 2b ef ff 00 b2 bf ec d7 d3 66 59 f6 17 29 cb a0 9c 2f 56 71 4d 41 f4 f3 97 55 6d 36 d6 fa 1e 5e 17 2d af 99 62 9c a2 ed 4e 2f 59 7e 69 15 b4 3f 07 68 5a 3d dc 97 56 5e 74 9e 64 9f bb 92 e7 e7 78 d7 fb 9b bf f6 6f e2 a7 78 8f 53 b0 d2 ae ed ad 52 ce 6b 8d 46 e7 fd 5d 94 5f ed 7f 1c cf ff 00 2c a3 Data Ascii: \|'4?MyJ?s+TW[6esp2ZJ&jK??soi4;McvGsn??'<y}iMzf7_g^?A?d?+fY)/VqMAUm6^-bN/Y~i?hZ=V^tdxoxSRkF]_,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.25	64296	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:21 UTC	346	OUT	GET /th?id=OADD2.10239399456843_14HWKSUZSEOH44H5N&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-01-07 17:03:21 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 445330 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A86022074AD142EC9C3F113256A4F79B Ref B: EWR30EDGE0314 Ref C: 2025-01-07T17:03:21Z Date: Tue, 07 Jan 2025 17:03:20 GMT Connection: close
2025-01-07 17:03:21 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 30 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 30 3a 31 31 20 31 31 3a 31 38 3a 35 36 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.0 (Windows)2023:10:11 11:18:568C
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 5f bb 48 b4 e5 15 62 1e be d4 f5 e6 9a bf 76 97 ad 34 66 3b e9 d6 93 19 a1 46 69 fb 7b f6 ab 26 e4 78 5a 36 e6 9f 8f 5a 56 14 07 31 1b 2f f8 d2 6d a9 94 67 8a 4d b9 db 4a c1 cc 46 ab f3 53 82 7f 76 a5 44 ef 4f 55 ab 51 44 b9 8d 55 cd 3c 47 8a 72 8c 37 14 f5 5f 97 35 4a 26 4e 44 61 69 ea b4 bb 4d 39 6a d2 b1 0d 89 b7 e5 f7 a5 60 19 bf bb 4b 8a 31 4c 9e 61 31 ff 00 01 a3 00 71 4e 61 46 3d a9 d8 39 88 d9 69 36 d4 98 a3 03 6d 16 1a 91 1a 8c 52 6d cb 54 c4 67 f8 69 31 47 28 73 11 6d 34 63 15 26 de d4 30 a4 d3 1f 31 16 da 31 4f 23 14 98 a5 61 dc 66 dc f2 29 bb 73 52 e2 92 97 28 f9 99 1e ca 4d b5 3b 01 b7 de 9a a2 87 14 1c cc 85 85 35 d7 e6 a9 98 13 d6 91 96 a7 94 a5 22 12 bf 2d 37 65 4e c0 d3 7a 72 2a 79 4a e6 23 c7 cd 43 0a 78 1e 94 ac b4 72 8e e4 7b 49 e9 49 Data Ascii: _Hbv4f;Fi{&xZ6ZV1/mgMJFSvDOUQDU<Gr7_5J&NDaiM9j`K1La1qNaF=9i6mRmTgi1G(sm4c&011O#af)sR(M;5"-7eNzr*yJ#Cxr{II
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 45 80 28 a2 8a 40 26 29 31 ed 4e c7 b5 14 00 dc 66 8c 7b 52 e2 96 95 80 6e 3d a9 36 d3 f1 ed 46 3d a9 f2 b0 bb 1a 06 29 71 4e 51 4b 8f 6a 39 40 6e 3d a8 a7 51 54 2b 9c c6 31 f2 d2 63 da 97 1f 2d 2d 78 67 b8 26 00 a4 c7 73 46 7f ef aa 31 ed 56 95 c6 2f f2 a5 c5 22 d3 ba d2 24 4a 31 ed 46 7d e9 c8 0b 6e c2 fd de 5a 81 21 aa ab 43 0f 9a 97 9a 3f 8a 95 82 e3 71 47 fc 02 9c 78 a3 af 3f 89 a2 c1 71 bd 57 9a 3d e9 f8 f9 a8 c7 b5 2e 56 17 19 d6 95 79 a5 22 80 28 b3 0b 89 4b ba 8e b4 b8 a0 41 db 9a 6d 14 ab 40 09 4e a3 de 8a 00 75 37 a5 1f 5a 29 a0 0a 5e 69 29 d4 c0 29 31 4b 45 00 14 9b 69 7f 8a 8c 7b 53 b0 09 8c 74 a4 e4 53 b1 ed 43 0a 5c a0 47 52 2d 18 5a 55 15 40 0b 4f a6 2d 39 48 e9 54 43 17 a5 14 9d 69 6a 84 2a d2 f4 a6 d2 e6 80 1c b4 82 8c fb d2 66 81 58 7d Data Ascii: E(@&)1Nf{Rn=6F=)qNQKj9@n=QT+1c--xg&sF1V/"$J1F}nZ!C?qGx?qW=.Vy"(KAm@Nu7Z)^i))1KEi{StSC\GR-ZU@O-9HTCij*fX}
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 74 fb d0 9a 86 1e 0a 95 57 cf 87 9e b1 7d 62 fb ae cd 7d a8 f5 fb 99 16 7d e9 d5 6a fa da 33 0a de 59 be eb 76 e0 8f e2 85 bf ba df d0 f7 aa 79 f7 af 4b 0b 8a 85 78 73 47 46 b4 69 ee 9f 67 fd 6b ba 3c 8c 66 0e 78 69 a4 dd d3 d5 35 b3 5d d7 ea b7 4f 46 3d 69 ea 6a 30 73 4b 9a eb 52 38 09 33 e9 4e c8 f4 a8 54 d3 94 d5 f3 13 ca 49 9a 55 22 a3 0d eb 4e 56 a7 74 2b 31 ff 00 5f e1 a5 cf a5 33 39 a5 ca d3 13 43 b7 67 9a 32 3b d3 77 0a 14 d0 2b 0f f9 28 2a 3a 86 a6 2e 4b 28 ef 46 73 c5 2b 8c 91 63 2d f7 29 c6 da 7e bb 7e f5 44 a7 d6 9c 8e 47 21 9a 93 4c a4 d5 b5 24 f2 25 5e b1 b5 27 92 77 60 a3 2f fb 4c b5 24 77 73 2f f1 6e ab 31 ea 44 ff 00 ac 8d 6b 36 e4 b6 46 91 85 09 6f 26 8a 5b 0e ec 77 a9 96 07 ec d5 a7 0d e5 9b ff 00 af 83 8f e1 6a b5 6e ba 43 f5 dd 1e ef Data Ascii: tW}b}}j3YvyKxsGFigk<fxi5]OF=ij0sKR83NTIU"NVt+1_39Cg2;w+(*:.K(Fs+c-)~~DG!L$%^'w`/L$ws/n1Dk6Fo&[wjnC
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 91 bc 9b 56 41 11 dc bb cf f7 4f 97 9f f8 0d 65 8a c2 c9 47 da 41 da 57 5c de 4d bf 6b 3f 9f c1 12 a8 d7 4b f7 72 5e ed 9d bc d2 fd dc 7e f7 cf 23 e8 0f 83 b6 97 16 5f 0f 74 f8 ef 16 35 b9 96 32 65 58 fe e2 e0 ec 50 3e 89 1a 55 af 8c ec b1 78 5f c2 f6 3f c5 3d cd ed d7 e0 96 57 07 ff 00 66 14 f8 c4 b6 b6 36 f6 51 b6 d3 04 4b 1e e6 f5 00 67 ff 00 1e cd 66 fc 68 94 dc fc 46 d0 74 3d cc bf d9 9e 19 d4 ae e4 6e cd be 13 1a ff 00 e8 0d 5f 8a 55 a8 f1 19 9c aa b7 a3 72 7f 25 19 3f ce c7 dd 54 8f b3 c3 53 a7 e8 8e ab c3 04 27 8b f4 5c ff 00 0f 88 35 68 3f ef bb 6d ff 00 fb 2d 57 b5 6f b2 7c 37 f0 ad c0 f9 46 8b e2 6f b3 49 fe ca 1b a9 6d cf fe 3b 28 ad 7b 7d 1b cb d5 ad 6e 05 ce d3 07 8d 1f 72 b2 fd d1 2d a1 5f fd 9a b9 ef 17 2b db fc 2d f1 e5 bc 7b 9e 4d 17 59 Data Ascii: VAOeGAW\Mk?Kr^~#_t52eXP>Ux_?=Wf6QKgfhFt=n_Ur%?TS'\5h?m-Wo\|7FoIm;({}nr-_+-{MY
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 9f 2a c3 a7 c1 c9 7f 77 95 b2 7d cb 8f 4a d2 9e 2d d1 bb c4 2b 5f f7 93 5f cb 1d a9 53 b7 77 6d ba b5 2e e6 32 a1 ed 1a f6 0f 55 78 41 f7 93 fe 25 4f 97 7f 43 94 b9 8c 68 fe 0d 8e ca 3d ab 77 ad 62 49 5b fe 79 da 29 f9 17 fe 06 df 37 fb a8 2a e7 88 16 5d 17 c2 ba 7f 85 a0 56 6b bd 41 97 50 d5 17 f8 b9 1f e8 f0 7e 0a 77 91 ea e3 d2 a3 f0 dc ab ae 78 aa f3 c4 3a cc 1b 34 db 18 cd e5 cc 5f 77 6c 69 85 8a dd 7d d8 ec 41 f8 d5 bf 06 5f c9 36 b1 aa fc 41 d6 f6 c8 74 d6 f3 d5 5b ee cd 7b 21 c4 31 81 fd d0 df 36 3f bb 1d 74 d6 93 a6 db 92 bc a1 ef 35 fc d5 65 a4 57 fd bb 75 e9 a3 e8 2a 51 53 b2 83 b4 67 ee c5 f6 a5 15 ef 4b d6 4f f5 46 e7 89 24 d5 b5 19 bc 39 f0 83 4d 6d ff 00 d9 b3 83 73 1a 2f cb 26 a1 36 37 e4 8f bc 23 53 b3 fe fa ae aa 3b 0d 24 fc 74 83 43 f0 Data Ascii: w}J-+__Swm.2UxA%OCh=wbI[y)7]VkAP~wx:4_wli}A_6At[{!16?t5eWu*QSgKOF$9Mms/&67#S;$tC
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 8f 5c 45 3c 32 38 8d 9a 1b a8 98 ed fe 13 1c a8 72 3f 10 cb 5f bd f0 be 3a ae 3b 2c c5 61 61 3b 4e ca ad 37 da 35 13 92 ff 00 c0 6a 29 af 44 8f 91 cd 28 c7 0f 8c a5 56 4b 4b f2 bf 96 9f 8a 2b 5c 43 a8 f8 7b c4 52 5b cb ba df 51 d2 ae cc 6d eb 1c b1 3e 32 3f e0 4b 5a df 1a 27 b0 d5 3c 6c de 23 b1 f2 d6 2f 11 da 43 a9 c9 1a ff 00 cb 1b 86 06 3b 84 3e 98 96 36 6f f8 1d 74 ff 00 1f 2d a0 d6 e4 d1 7e 23 59 a2 ac 3e 2f b1 59 ee d5 7e ec 77 b1 01 1c cb f5 24 2b 57 9d e9 7a 45 ce a7 e2 0b 3b 4b 35 f3 2e 2e b7 5b 47 1f f7 9f 61 91 00 f7 25 48 fc 6b e9 f2 fc 45 2c 75 1c 26 75 3f 76 71 4e 13 5d ae d2 9c 5f f8 6a 45 6b d2 cf b9 e3 56 a5 3a 55 2a e0 12 bd f5 8f aa da de ab 43 af f8 4f 12 f8 ab c2 fa c7 c3 3b 99 57 cc d5 a3 37 9a 34 8d ff 00 2c ef e2 4c 85 1f f5 d1 32 Data Ascii: \E<28r?_:;,aa;N75j)D(VKK+\C{R[Qm>2?KZ'<l#/C;>6ot-~#Y>/Y~w$+WzE;K5..[Ga%HkE,u&u?vqN]_jEkV:U*CO;W74,L2
2025-01-07 17:03:21 UTC	16067	IN	Data Raw: a6 aa bd c6 68 fa a7 f6 c7 85 74 bd 54 36 e1 a9 58 c1 73 ff 00 7f 22 0c 7f 52 6b e7 2f da 97 4d fb 37 88 b4 7d 5b fe 7e 22 9b 4f 93 ea 87 cd 8f f4 df 5e e3 f0 75 f6 7c 3f 87 4c 3d 74 5b fb dd 31 95 bf bb 0d cc 9b 3f f2 1b 47 5c 37 ed 59 a5 2d cf 81 ee ae 82 7c fa 74 b0 ea 0b f2 f6 43 b2 4f fc 71 9a b9 68 e3 7e a9 c4 98 1c 7a 97 b8 e4 a2 fd 26 ad f9 3b 9b aa 3e d3 0d 56 87 56 9f e0 79 a6 8e 3f e1 25 fd 9f b5 5d 2c 7c d7 de 14 bb 1a ad b7 af d9 e4 f9 26 1f 41 f7 ab cb 3c 3d 3c 96 1a 84 a2 06 f2 e4 b3 bd 32 44 cb f7 94 36 24 42 3e 87 35 e9 1f 02 35 9b 6d 23 e2 5d bd bd f7 fc 83 f5 55 6d 3e f1 59 be 56 8a 51 b0 e7 e8 76 9a e0 fc 73 a2 cf e1 7f 89 17 da 1d ca fe f2 0f 32 d5 99 bf 88 c4 f9 46 fc 63 6c d7 ec b9 57 2e 0b 3d c5 65 f3 f8 2a 7e f6 3d ad 51 5a a2 f9 Data Ascii: htT6Xs"Rk/M7}[~"O^u\|?L=t[1?G\7Y-\|tCOqh~z&;>VVy?%],\|&A<=<2D6$B>55m#]Um>YVQvs2FclW.=e*~=QZ
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: eb fc 4f 33 ff 00 df 31 6d 1f fa 15 2f 8b 86 df 86 3e 07 8f fe 7a 4b ab c9 fe f6 0c 4b 5e f5 1a 3c 98 5c b6 1f f4 f9 7e 14 e6 bf 43 92 bc 94 b1 58 89 7f 71 fe 2e ff 00 a8 cf 86 83 74 3e 26 1f de f0 b6 a3 ff 00 a2 c1 ae 62 61 f3 49 8f 9b ad 75 1f 0a 53 37 5a f8 fb c2 4f 0b ea 43 ff 00 20 e6 b9 46 0c df f0 25 af a5 c0 ff 00 c8 e7 18 bf bb 4b ff 00 6f 5f a1 e1 e2 75 cb f0 ef ce 7f a1 d4 fc 5d e7 e2 76 ab 20 e9 3f d9 67 ff 00 bf 96 b0 31 ad 1b 73 f6 9f 80 b7 51 fd ef ec df 15 d9 4f fe e8 9a 29 21 35 9d f1 48 89 3c 55 05 ca ff 00 cb 7d 13 4c 93 ff 00 25 42 ff 00 ec 95 6f c1 ef e7 fc 29 f1 e5 a7 fc f2 b0 b4 bf 55 f7 86 e9 09 3f 93 57 ce 56 6d 70 c6 06 af fc fb 95 0f fc 96 a4 22 ff 00 0b 9e 95 3b 7f 6b d5 8f f3 a7 f8 c6 e7 3f 1f 0d 8a 9f 41 99 e0 d4 b5 25 8b e5 Data Ascii: O31m/>zKK^<\~CXq.t>&baIuS7ZOC F%Ko_u]v ?g1sQO)!5H<U}L%Bo)U?WVmp";k?A%
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 37 2f fc fb 45 fb d9 98 7b 16 f2 d6 ba 9f 80 7a 2e 9f 17 86 7f e1 20 f2 a1 93 52 d4 1a 73 24 aa db 9e 18 9d c2 2c 5f ec e5 62 76 c7 fb 55 83 e3 7b e4 d3 35 0b 1f 0a 44 bf 2e 8f 65 1d 9c 9f dd fb 44 bf bc 98 fe 6e 07 fc 06 bd 3e d7 44 b1 f0 fe 8f 1d 9e 89 04 10 5b 79 9e 64 9e 47 dd 99 c2 08 cb fb ee d8 c7 3f ed 57 c3 67 d8 c7 1c 0c a4 ef 7a cf 9b fe dd 7a 24 ff 00 ed ce 5f 99 ef e5 d8 78 ba ea df 65 5b e7 ff 00 0f 73 7b e1 fe 9d 6e 6e ae 6e 52 08 e3 68 a3 d8 ac ab b7 96 f7 1e d5 b9 e2 8b 9b 7d 1b c2 7a 86 ad 2b 34 8b 63 69 24 df 33 7c ac 40 f9 47 fd f5 4c f0 7c 7f 67 d0 51 fb dc b9 7f c3 a0 ac 5f da 0a 59 07 c3 29 6c 61 fb d7 d3 a8 65 ff 00 61 08 63 fa ed af 8b a5 83 85 7a d0 a7 2e ad 27 f3 6a e7 76 26 a4 b9 dd bf ab 1e 13 e1 db 19 24 65 37 1f 7b 66 f9 1b Data Ascii: 7/E{z. Rs$,_bvU{5D.eDn>D[ydG?Wgzz$_xe[s{nnnRh}z+4ci$3\|@GL\|gQ_Y)laeacz.'jv&$e7{f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.25	64298	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:21 UTC	346	OUT	GET /th?id=OADD2.10239402415510_1LQQ8WSBAXW97X0WT&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-01-07 17:03:21 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 606841 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 0DC958607F264F1C9249FFC4B7DC485E Ref B: EWR30EDGE0421 Ref C: 2025-01-07T17:03:21Z Date: Tue, 07 Jan 2025 17:03:20 GMT Connection: close
2025-01-07 17:03:21 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 16 5a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 39 3a 31 32 20 30 39 3a 34 36 3a 30 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ZExifMM*bj(1 r2i``Adobe Photoshop 25.11 (Windows)2024:09:12 09:46:028
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: e8 6b 4d 16 a1 8b 6c 9b 5a ae 47 b5 7f e5 9d 53 8c b3 47 f3 7d ea d1 b5 46 78 d3 75 71 d4 67 b7 85 82 7a 45 12 c6 19 bf e5 9d 48 a3 f8 6a 48 63 dd b2 ac 2c 0a df 76 b9 1c 91 ee d3 a3 72 15 45 69 37 55 a8 63 66 a9 21 b4 ab 51 c0 cb 1e ea e7 9d 43 d3 a3 87 7d 51 5e 3b 7a 95 61 db 53 ad bb 35 48 b6 cc 6b 17 50 ee 8e 1f 4d 11 5d 53 6d 0a 1a ae 47 06 ef bd 52 47 6e bf f0 2a cd cd 1b c6 83 65 35 0d 53 2f fb 55 71 6d d5 be ed 3b ec eb 51 ed 11 d1 1a 0d 11 c3 1d 4e b1 2f 99 f3 52 ac 6a b5 2a 8d bf 7a b2 94 ae 75 53 a6 b6 62 ac 4b 52 c3 1a ad 44 c5 bc bf 96 8c ca b5 9b 3a 54 51 6f 62 d1 84 a8 3c d6 6a 99 77 37 de a8 3a 23 66 84 c5 3b ef 52 aa 50 c2 95 cb b0 aa 31 4b 42 a3 53 d5 2a 1b 34 5b 02 d3 96 91 85 3a 31 ba a1 bb 96 90 67 15 22 bd 37 65 2c 62 91 a2 d0 b2 a7 Data Ascii: kMlZGSG}FxuqgzEHjHc,vrEi7Ucf!QC}Q^;zaS5HkPM]SmGRGne5S/Uqm;QN/RjzuSbKRD:TQob<jw7:#f;RP1KBS*4[:1g"7e,b
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 5c 7e ef e6 ae 77 5c ff 00 59 f2 ff 00 e3 95 ea 61 6f 75 73 e3 b3 a7 07 06 d1 93 30 65 f9 7f 86 a1 61 56 64 a8 b9 af 50 f8 f4 40 c1 aa 36 18 a9 da 93 15 46 9c c5 7c d1 9a 99 a2 55 a6 32 62 82 b9 93 1b 4c 6a 73 52 71 41 43 72 68 a7 6d f7 a6 e0 d0 30 a5 5a 4a 29 dc 43 a9 33 42 d1 8a 40 3d 4d 2e 6a 3c d3 e8 13 1d bb de 85 34 da 76 df 6a 04 3a 9d 4c 5a 91 68 21 89 d6 8a 28 a9 10 51 4e fb d4 6d f6 a0 1b 1b 4e db ed 4b 8a 31 40 ae 26 df 6a 6d 4b b2 8d 94 05 c8 a8 e6 a7 58 dd a3 dd fd da 6f 96 df c3 40 ee 47 8a 5d be d4 ff 00 29 fd 6a 55 89 9b ee d2 ba 0b 37 b2 2b ed f6 a9 6d ed e4 7f b9 1e ea bf 63 64 cd 22 b4 91 d6 9d ad b2 c1 f2 af de ac 2a 62 23 1d b7 3d 1c 3e 5f 52 a5 9c b4 46 0f d9 a4 f3 36 d4 d1 d9 4b e5 fc d5 bb e4 2f de d9 4e 58 bf ef 9a c5 e2 59 db 0c Data Ascii: \~w\Yaous0eaVdP@6F\|U2bLjsRqACrhm0ZJ)C3B@=M.j<4vj:LZh!(QNmNK1@&jmKXo@G])jU7+mcd"*b#=>_RF6K/NXY
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: a7 c5 35 a8 27 94 65 36 9c c2 9a c2 82 42 8e 69 19 55 be f5 2f 34 00 51 45 2e 69 a0 16 8a 6d 26 69 80 fa 36 fb 53 37 d1 be 80 1f 4b 8a 6e 69 54 d4 80 ee 94 ea 66 68 cd 03 4e c4 bb bd e9 ac 6a 3d de f4 31 a0 7c c8 7e 69 54 d4 7b 9a 95 68 1a 77 26 cd 3b 35 0e 69 d9 a0 ab 8e cd 2b 3d 33 34 9c d2 b0 f9 87 e6 8c d3 14 d1 45 87 70 99 3c d8 fc b5 92 45 6f ef a3 ed ac 5f 0f f8 a7 4c d5 35 27 d3 63 9f 75 c2 bb 2a 3f f0 cc c3 3b 87 d7 e5 ad a8 7f d7 a2 b7 f7 eb e6 fb ad 67 c7 ba 4f c6 9f 32 4d 26 fb fb 0e eb 56 6b 3b 1b 4f b5 7e e1 e6 49 37 e4 c8 4f ca bb 57 9c 2e 0f 20 53 8c 6e 65 39 b8 ea 8f a4 33 ba 93 35 4b 43 b8 9e eb 4d 49 ae 20 f2 a4 df b7 e4 7d cb ff 00 01 ab 95 26 8a 57 57 06 34 51 45 03 b8 99 a4 a9 39 a4 c5 03 19 bb de 8d de f4 fc 52 30 a0 06 d1 4e a2 81 Data Ascii: 5'e6BiU/4QE.im&i6S7KniTfhNj=1\|~iT{hw&;5i+=34Ep<Eo_L5'cu*?;gO2M&Vk;O~I7OW. Sne935KCMI }&WW4QE9R0N
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 1b 73 1f c2 b1 ae af 7e e7 4d 07 6b 68 7a 5f c1 3d 63 5a 83 c5 5a 34 97 d1 e9 ba 5e a1 e2 6b 7f 22 c6 67 ba 56 9e e5 4e 66 79 1a 2e b1 cb 2b 36 01 5e 8a df 77 a5 7b 6f c6 a8 db 5c f8 11 ae 5c 68 f7 fe 54 91 58 fd b2 19 bf 8a 16 87 f7 8d ff 00 02 1b 2b c3 7e 0e fc 44 d2 ad be 0e e9 9a 2e b4 9a 56 97 ae 78 6a c7 6a 6a 97 df 32 ea 16 53 6f 78 7c a5 4f de b4 9f 2f b1 5f 5a f4 4d 17 e2 a7 87 a6 f8 1f ab 5e 5e 6b ba 6d d4 8b 63 0f d9 ed 1d 16 2f dd ed 4f bf fc 52 26 fd db 88 07 01 30 79 ac e9 b8 28 b8 df 72 ea 46 4e 5c c7 c5 57 da 84 b7 16 a9 ab 5f 5f ea 5f 6e de b2 fd a3 ef 32 65 b7 02 ac 79 66 fb c7 35 d8 5b dd e8 7a bf c2 7d 5b 52 92 d2 fb fb 41 ae 21 8a d3 51 bb 9d b7 26 57 13 3c 8f ff 00 2d 72 df c0 17 2a 39 cf 35 d8 78 a3 e1 da f8 b7 58 f1 34 92 6b 5a 96 Data Ascii: s~Mkhz_=cZZ4^k"gVNfy.+6^w{o\\hTX+~D.Vxjjj2Sox\|O/_ZM^^kmc/OR&0y(rFN\W___n2eyf5[z}[RA!Q&W<-r*95xX4kZ
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 00 5a c2 f8 99 e3 1d 7b c6 5a e5 c6 a1 79 3e eb 58 bc b5 b7 87 fe 59 59 46 8b 1a 2f 94 3f 83 ee 0e 95 d9 fe ce 3a fe 99 3f 8c 6c 6f 35 4f b0 c5 67 a6 dc 34 ff 00 68 d8 bb 52 f5 d4 ed 9d c3 e4 3a 22 ae d0 3b 3b e7 15 9d 47 b3 2a 25 8f 04 d8 6b da 36 87 ab 6b 4b e1 3b 58 ac 74 6b 7b 48 35 48 66 dd 3b 79 85 9e 48 fc fd 9c 29 63 b7 70 6f ba 76 66 ad fe cf 37 fa aa 7c 7e f0 f7 97 ab 5f 4b 0d 9e a9 77 63 7d 69 6f 62 db 6d a3 9a 43 23 db a3 7f 1a be 33 b7 ad 74 6d f1 27 57 4f 18 f8 d3 c2 be 15 92 0b ad 3f c5 5a b3 4f 7d fd a9 a7 2f 9a f1 fd 95 17 cd 6f e1 5f bb bb f5 ac 1f 82 3e 34 f1 8d 94 76 3a 7e 8f a9 58 c5 f6 af 12 5c cf 2c d6 f6 b1 b4 b7 2a 8a 9b a5 97 78 fb a3 cb 5d 9f 8d 73 4e 71 85 da d8 b5 76 7b 17 8c 3e 20 ea fa cd c6 93 e0 f8 52 ee de de ce e2 75 9b Data Ascii: Z{Zy>XYYF/?:?lo5Og4hR:";;G%k6kK;Xtk{H5Hf;yH)cpovf7\|~_Kwc}iobmC#3tm'WO?ZO}/o_>4v:~X\,x]sNqv{> Ru
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: a3 65 47 f3 6e 23 93 6e df ef d6 a5 bf 8a 96 29 fc c8 e3 85 3f 85 11 e0 5d bf 9a 9c d2 b7 8a 9c 24 3f e8 96 bf 2f df f9 3e ff 00 f9 ed 51 cd 3e 91 36 f6 54 15 af 53 f0 ff 00 82 43 f6 b8 1f ef 79 6b ff 00 6f 52 7d df ce 92 49 60 3b 1a 3f 2f e6 f9 7f d7 49 57 1b c4 b6 6f 32 37 d8 7c a5 fe 3d 90 46 db ff 00 95 36 3f 10 d9 b4 08 d2 69 b1 f9 8b bb 63 a2 2a ab fe 1d b1 52 b9 bf 94 d6 51 a5 ff 00 3f 57 fe 02 55 86 ef 64 ff 00 bb 82 05 db bb e7 47 6f 9f fe fa a5 86 fe fb c8 da b2 6d 8d bf d8 5d bb aa c2 eb b6 9f 77 ec 91 f9 7b 3e 7f e1 f9 8f f7 46 29 bf db 16 d6 f2 3f 93 06 e6 97 6f df 7d bd 3f e0 34 3d 7e c8 a2 e0 ad 6a bf 71 03 45 7c ff 00 2a cf 6b 13 36 ef 9f e5 fb bf 85 44 b2 df 27 ef 16 48 db 6a 7c 8e 90 7c cf b7 b8 3f d6 b4 57 c4 1a 52 4e eb 35 a7 cc ce bf Data Ascii: eGn#n)?]$?/>Q>6TSCykoR}I`;?/IWo27\|=F6?icRQ?WUdGom]w{>F)?o}?4=~jqE\|k6D'Hj\|\|?WRN5
2025-01-07 17:03:21 UTC	16067	IN	Data Raw: 71 df bd 7b 07 c1 5f 8c 9a 56 9b e2 4b bb 1f 11 5f c9 2c 3a 6d a6 dd 3a e2 64 66 9e f5 52 47 e2 65 fe f8 46 e3 a6 76 57 98 6a d3 e8 7f 65 b7 f1 15 9f 97 6b 33 3d c7 da ed 1d db 6d cf ef 36 c7 73 1a b6 4a af 77 4c e7 db 15 dd 91 e1 31 78 69 62 68 d7 5a 4a d6 6b 6d 53 db f5 32 c6 d7 a1 51 53 94 5e ab fe 01 b1 e2 cb 2d 43 c5 1e 3f 87 50 f1 25 df f6 6d 8c 4e b1 69 cf e5 aa fd 8a cb cc db bf f8 46 e3 f3 13 8c fc cd 59 1f 13 a2 d1 5e c5 34 bf 04 c7 f6 cd 2f 4d db b3 51 86 e9 9a ea 65 2c 73 e6 c2 de fd 36 83 f5 aa 7a 09 d3 f5 cd 72 e2 df 56 bb be bc 6b 79 bf e2 5c 9b 19 95 e3 76 3b d9 73 c2 ae ee df 2d 64 78 92 4d 3d f5 27 8f 4d 82 d6 c2 3b 7d cd 6e 93 7e e2 57 5f 69 07 0d 9e d9 f9 ab e9 70 b4 7d 9b 8c 3f 95 2e 9a 1e 6d 49 de ef bf de 47 e1 34 8a d6 ea e2 e2 49 Data Ascii: q{_VK_,:m:dfRGeFvWjek3=m6sJwL1xibhZJkmS2QS^-C?P%mNiFY^4/MQe,s6zrVky\v;s-dxM='M;}n~W_ip}?.mIG4I
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: f5 c4 47 ff 00 89 75 cd be ed c8 fb 8f ee f7 12 fe 50 2b fd ce 3e f5 79 56 9f e1 1b e5 81 b5 29 36 7d 8d 6f 9a d2 54 49 ff 00 e3 da 41 f3 04 73 db 2a 3d f7 6d af 5b 0f 89 a3 52 4e 53 4b 99 5b d7 fa 76 2f 96 4a 2a 29 e8 c9 fe 14 e8 9f 68 d5 61 bc bc f9 59 9e 35 85 11 f6 b2 65 bf 2e 76 e3 fe 05 49 e2 24 8b 49 92 fa 49 2e 3e d0 d1 4d f6 6b 77 74 65 64 cb 6f c7 f7 46 3f 2a df d5 ad 22 f0 f6 8f 69 67 25 dc 9f 6c bf 86 6d ef bf 72 db 30 6c ec 21 b9 e7 80 4d 70 7a c4 ec b1 c3 ba 49 25 87 63 37 ce 9f 7f de bb 69 5e a4 9c d3 d1 9a 4e d0 82 8f 51 2d 4a db fc b7 11 c9 b9 be ff 00 f7 aa e7 85 fe d3 16 b1 6f 37 ee d9 ad 66 56 d8 ff 00 34 4f eb b8 7f 76 a9 68 62 0b 8b e4 6b a9 24 58 7e 6d ef bf ee 7c bc 6d fa 56 97 83 6e 16 0f 1a 58 ea 0d 77 6b 6b e5 4c b2 bb dc 23 4b Data Ascii: GuP+>yV)6}oTIAs=m[RNSK[v/J)haY5e.vI$II.>MkwtedoF?*"ig%lmr0l!MpzI%c7i^NQ-Jo7fV4Ovhbk$X~m\|mVnXwkkL#K
2025-01-07 17:03:21 UTC	16384	IN	Data Raw: 2d 5e e2 d7 c5 1a c4 ab 14 cc af 32 5a c7 b5 d4 77 55 eb b7 fd a1 5a 1f f0 cb ff 00 0e ec 3f 7d 7d ab 78 8d 21 fd cf fa e8 3f bf fe ea 1d ab ee 6b 2f ed 1a 36 be bf 71 b7 f6 7d 6b db 4f bc f8 f5 85 cb ff 00 b3 b7 fe f9 a9 14 5e 7f cf 4d b5 f6 0e a9 f0 43 e0 7e 9d 71 bb 56 d6 af a2 86 df 72 cd bf 54 55 95 d5 3f 8b 6e d0 7f 01 5e 5d f1 62 df e0 7e 97 e1 ff 00 b2 f8 7f 4d ba fb 45 e4 2a d1 5d da 6b 0b 7d e4 b0 6f e2 5e 36 e5 7a 8f ca 9c 31 d0 a8 ed 14 c5 3c 0c e0 9b 94 91 e5 5a 0c 6d 3e 95 70 d7 11 ee fb 3c 32 32 7c fb 7f 86 b2 34 f8 da 3f de 37 cd 5b da 85 bb 2d 8c d3 69 3a 4d f2 d9 aa 2f 9d 36 c6 65 dc 57 9f 98 8f 97 f1 ac 95 2a d0 24 71 ff 00 c0 eb a1 6b a9 c6 d5 8b 5f 66 65 81 2f ae 3e 58 d9 f6 c2 8f fc 75 7d a2 8a d2 08 a1 8e 38 25 ba 97 e6 79 be 6f 93 Data Ascii: -^2ZwUZ?}}x!?k/6q}kO^MC~qVrTU?n^]b~ME]k}o^6z1<Zm>p<22\|4?7[-i:M/6eW$qk_fe/>Xu}8%yo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.25	64300	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:23 UTC	375	OUT	GET /th?id=OADD2.10239399230513_1725RTMX37W73V5P6&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-01-07 17:03:23 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 381353 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 970FDD9AFA0141B2AD070CD6BC3CE0E0 Ref B: EWR30EDGE0106 Ref C: 2025-01-07T17:03:23Z Date: Tue, 07 Jan 2025 17:03:23 GMT Connection: close
2025-01-07 17:03:23 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 39 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 38 3a 30 36 20 30 39 3a 35 35 3a 30 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.9 (Windows)2024:08:06 09:55:008C
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: cd d4 1a 65 fc 8d 6f 23 93 cb 92 48 27 ee fd 05 29 4a 34 e0 ea 54 76 47 1d 6c 5b 8d 55 46 92 e6 9b 4f 4b ed ea 7a ef 8b bc 79 a1 68 6a e9 24 fe 7c a3 3f 2c 64 60 1f 73 5c 3e a1 f1 ae 20 ac 2c ec a1 0d c6 0b 31 62 3f 01 5e 11 aa 6b 57 37 f2 19 25 91 8e ee 48 cf 4f f1 aa 10 dc 00 e4 e7 8e 3a 0e f5 e5 56 cd 1f fc ba 8a 4b cf 53 af 0f 96 e2 2a 6b 88 aa d7 94 74 5f e6 7a 8f c5 0f 88 2b e3 0d 1c 59 dd 47 1a 4b 17 28 63 5c 0c 1e 79 c9 3c 57 1b e1 3b 94 b4 bd 8a 58 e4 97 74 6c 18 60 ed 20 02 3a 1a c5 12 86 7f 5c 9e fd 78 ab 76 21 77 07 57 e4 13 df 07 fc f1 5e 66 27 11 3a ee f3 7a 9e ce 0f 07 4f 09 75 4f ab bf cc fa 67 c0 be 3b f0 ee b5 e5 2e a3 7b 24 17 6a 00 51 30 06 31 db 3b 87 f1 74 e4 8a ed ed 82 49 aa 3c b0 91 24 61 14 2b a9 ca 9e a7 82 2b e4 4b 69 d9 95 48 Data Ascii: eo#H')J4TvGl[UFOKzyhj$\|?,d`s\> ,1b?^kW7%HO:VKS*kt_z+YGK(c\y<W;Xtl` :\xv!wW^f':zOuOg;.{$jQ01;tI<$a++KiH
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: 4f e7 5c f2 a4 cd d5 64 26 ec b7 e1 d4 52 a9 3b b3 d0 f7 a1 71 9c f1 41 5f 7a cf d9 1a 7b 70 f3 3f 31 4a 25 19 c8 35 13 71 50 b1 e9 9e 05 54 68 5c 97 89 68 b7 e7 7c df 5c 74 a0 cb 86 cd 54 c9 2d c1 a0 1f 4e d5 4b 0e 88 78 a6 58 92 45 3c 12 b8 aa f2 b8 2d 81 e9 9e 29 8c d9 5f 7f ea 29 8d 92 b9 ed fa f3 5d 10 c3 a4 8c 67 88 6c 1e 4e c3 ad 42 4f cd 90 69 c7 21 7d e9 a4 13 8c 8e 4f 51 5d 11 a6 91 cc ea b6 c7 a9 ca fe b4 c9 17 39 03 d3 34 bc 7e 5e d4 64 9e 07 23 1d e8 e4 d4 6e a6 9a 90 ca 33 c0 e4 54 78 1b b2 73 9a b1 21 cb 1e e0 71 4d 75 eb 8f bd 8e 2b 44 cc 0a ef f7 4e 69 ac bd 41 06 a6 71 da 98 54 ed c0 1f e4 d6 9d 08 20 91 41 5e 2a 26 8f 1c 8c 90 3a 55 b7 5f 97 27 f0 a8 98 13 cf a5 5a 60 d2 2a b2 91 83 db d2 9a 01 e4 75 ab 0c a3 93 4c c6 dc fb f4 35 77 24 Data Ascii: O\d&R;qA_z{p?1J%5qPTh\h\|\tT-NKxXE<-)_)]glNBOi!}OQ]94~^d#n3Txs!qMu+DNiAqT A^&:U_'Z`uL5w$
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: c9 1d fd 28 00 1f a5 3c 0c 64 11 cf bd 27 46 c7 7e c6 a4 a1 30 0f ad 39 46 14 ff 00 9e 29 01 07 a0 c9 eb 8a 7f f0 90 78 fe b8 a4 c0 6b 73 d7 b5 2f d7 83 ec 69 14 91 26 48 18 ef fe 45 38 7a f1 ed 8f d6 81 86 09 34 67 1c 67 d8 7d 68 e7 68 ed 47 f1 10 3a ff 00 5a 91 8e cf 18 3f 4c 7b d3 97 07 03 bf 5a 8c 12 7b 0e 29 d9 3d f8 3e b4 9a 04 c7 80 02 e7 fc e6 9f f8 60 d4 2a 73 21 cf 4f a5 3b 78 ea 48 f7 15 36 29 0f 3c f3 d4 51 c0 5e 7f ce 69 bb 81 50 73 4a b8 3c 7e 14 0e e1 80 7a d1 d3 af 5a 46 24 73 46 e3 d4 fd 68 0b 8b c6 dc 74 14 8c 3e 5f 6a 32 3a 8c 67 b5 25 03 40 07 ff 00 5f 9a 08 23 db ff 00 af 41 3d c7 5a 50 3d 7a d0 03 4a e3 1c fb f6 a6 3a 93 eb 53 0c ed e2 91 80 3d 68 15 88 36 93 ef f8 53 54 37 4d bf 95 58 6a 30 3a 81 c0 c0 a7 70 e5 22 2b 8e b4 8e a7 27 Data Ascii: (<d'F~09F)xks/i&HE8z4gg}hhG:Z?L{Z{)=>`*s!O;xH6)<Q^iPsJ<~zZF$sFht>_j2:g%@_#A=ZP=zJ:S=h6ST7MXj0:p"+'
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: 20 5e c7 a7 af ad 2e d3 d7 3f d6 8c 76 fc 78 a5 41 f3 67 d2 95 c6 20 5f 5f fe bf 5a 53 83 cf a1 22 82 30 bc 74 eb 4e 23 a7 ad 17 01 39 2b c7 6f cb 14 28 03 a9 ce 69 40 1c 1a 30 43 67 a5 34 16 13 69 ee 1b fa 52 e3 0d 93 4a c7 1d 7d a8 c7 52 3d a9 5c 2d 61 31 86 e3 14 74 f7 e6 8c 13 c8 c9 eb 4f f4 23 ff 00 d5 48 68 4c 67 de 80 01 e0 ff 00 f5 e8 51 9e 7f 95 18 f9 b1 c7 4f ad 03 02 be bd 69 31 96 c7 4f ad 38 f3 c1 1d 7d 28 00 74 ed 4e e2 1a 06 72 01 e3 d6 b0 fe 25 4f e4 78 32 f1 89 c0 68 f6 e3 d7 3e f5 be c3 a1 ae 27 e3 b5 d7 d9 bc 0e ea 09 1e 63 e3 eb eb 57 4b 59 26 72 e3 9a 58 79 79 e9 f7 9f 37 ea ce 24 ba 90 8e 85 8f f3 a8 50 1e 73 ce 39 c0 1c 0f f1 a5 b9 39 98 f3 8e 69 54 00 b8 3e dc fe b5 e5 c9 dd 9e fd 25 68 24 4b 19 db 81 93 ea 47 a5 5f b7 55 e3 38 07 Data Ascii: ^.?vxAg __ZS"0tN#9+o(i@0Cg4iRJ}R=\-a1tO#HhLgQOi1O8}(tNr%Ox2h>'cWKY&rXyy7$Ps99iT>%h$KG_U8
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: de a5 4c ee cf 53 ed fe 35 1a 82 0e 41 ea 7f 4a 95 41 f5 39 3d bf 5a e7 3d 6e 84 f6 e7 19 00 82 31 d0 f5 e2 b4 6d 1c 1c 03 ca f7 e2 b3 e2 c1 c1 e0 f4 e3 19 1c fd 6a ec 3f 2e 15 47 19 fc 2a 59 71 d0 d4 b2 60 5b 69 fa 0a d4 b7 00 28 cf 3f 36 31 59 36 5c 90 30 7d 3d bf 5a d3 b7 39 c1 6f af a6 47 bd 43 36 b9 b3 64 3e 75 51 8c 8e 3a d6 e5 99 50 80 8f 5c f2 31 cd 61 d9 8c 28 24 f2 70 7a 73 5b 36 59 08 01 3f 9f f8 d6 32 35 8a b1 bb a7 67 6a 91 f8 d6 de 96 32 de 8d 58 5a 66 0c 63 3f 5a da d3 0f fa 47 3d 38 e4 57 2c cd 62 6e da 71 d0 f1 8a d1 89 8e d0 4f 4e 95 9b 67 8e 4d 68 5a 9c 2f 1c e6 b1 63 ea 5a 64 f9 41 15 13 82 3f 84 f3 56 65 0b f6 70 40 19 06 a0 63 96 c7 7e f5 eb e0 5f ee 8f 1f 1a bf 7a 47 83 f4 a4 00 ee 1f a5 48 40 fc 69 a4 1d c6 bb 8e 31 bd 79 02 91 bb Data Ascii: LS5AJA9=Z=n1mj?.G*Yq`[i(?61Y6\0}=Z9oGC6d>uQ:P\1a($pzs[6Y?25gj2XZfc?ZG=8W,bnqONgMhZ/cZdA?Vep@c~_zGH@i1y
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: 3f 4c d4 42 39 42 e3 60 e6 9f 30 72 a2 49 27 2b 8d a3 35 25 bb ee 5e 46 2a 25 b7 f9 d5 8f 51 53 60 85 e0 50 9b 0e 54 3f 18 e0 d1 93 d4 d3 63 2c 72 18 60 50 df 78 9c f1 4e e2 b0 bd 3e 9e b4 37 a5 20 2a 78 dd fa d1 91 de 8b 85 98 a4 f7 a3 af a7 14 8c 37 72 28 8c e3 38 a6 02 b7 dd c8 eb 49 ff 00 ea a7 01 d0 d2 28 27 8e 9d a8 25 a1 a3 8e 94 b4 1f bb 46 3b 1a 00 0e 36 e4 73 8a 6e 3d 47 02 9f b4 6e ce de 29 18 7a 51 71 b1 a4 67 f9 d0 40 ed 4f db dc 52 6d cd 2b 88 66 01 e2 97 19 e0 8e 94 ec 65 ba 73 4b b7 9f bd 47 30 58 66 31 cf f2 a6 81 f8 54 bc 73 47 e1 9a 5c c5 58 8f 1d 8f 4a 00 01 a9 f4 7f 9c 52 e6 01 98 f9 a9 36 fa 75 a7 f0 7e b4 75 5e 7f 4a 18 11 ed ca f1 d2 97 69 a7 63 e6 eb 47 03 93 bb fa 52 02 3c 7a 0a 86 e1 a3 8d 0b c8 76 a8 eb 56 08 15 5b 50 b6 13 db Data Ascii: ?LB9B`0rI'+5%^F%QS`PT?c,r`PxN>7 x7r(8I('%F;6sn=Gn)zQqg@ORm+fesKG0Xf1TsG\XJR6u~u^JicGR<zvV[P
2025-01-07 17:03:24 UTC	16067	IN	Data Raw: d2 9e b9 db c8 c7 ad 18 ee 68 b8 ec 34 2e 78 19 f4 e6 91 41 2a 4f 7a 79 5c f1 df d2 83 ca e0 7a 0a 57 0b 0d db fe 1d 28 20 0e 29 d8 cf 38 e9 40 1d cd 2e 61 d8 6f f0 e7 e9 47 5f ad 29 00 b6 7d b1 46 3a 1c d2 e6 0b 00 cd 07 df f4 a5 1f ce 81 e9 f8 51 cc 16 0e 7d fa 52 1c f4 cf 22 97 da 8c 80 d9 db 4b 98 76 13 af 07 f5 a7 63 f2 a0 1c 75 eb 49 d1 72 3b d2 e6 0b 00 f5 1f 85 3b 19 e2 9b 9f 5a 5f af 14 73 0e c0 06 7a 50 56 8e 76 e3 6f 14 51 cc 16 05 3e bd 7d 29 78 a4 63 ed 46 3d 0d 4d c3 95 0a 0e 38 3c 52 ee a4 c7 6e 94 bf 53 47 30 ec 19 3b a8 1f 78 fb d2 93 85 cf 5a 4c e3 8e f4 b9 87 61 7e 94 13 d3 34 99 e9 4a c7 14 73 05 85 a0 e3 a1 e2 91 69 43 77 35 37 0b 00 3f 80 a5 1d ba 52 7f 16 76 d0 71 fe f5 01 61 4f 3d 69 4f 34 dc e3 9e e6 9d d3 19 cd 2e 61 d8 33 ce 68 Data Ascii: h4.xA*Ozy\zW( )8@.aoG_)}F:Q}R"KvcuIr;;Z_szPVvoQ>})xcF=M8<RnSG0;xZLa~4JsiCw57?RvqaO=iO4.a3h
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: e3 35 2a dc e7 8c e0 8f 7f 4a c3 8e 56 dd 8c 83 c7 7a b4 92 fa f5 3f e7 9a 86 91 69 dc d1 6b 92 5b 1f 37 e1 49 0c ac 1b 8e 49 fc fd fd 6a a4 3f 3e 39 fa d6 9e 91 03 4b 70 a1 53 39 35 94 9a 42 ea 59 b4 59 82 82 78 fc 6a f4 56 33 2c a8 58 7d e3 da ba 1d 1f 40 0f 1f 98 d1 9f 33 1c 67 a5 6b 41 a4 fd 9e 64 91 a1 dd 8e dd 6b 96 55 95 cb 57 39 97 49 11 06 f0 3e 5c 6e fa 55 ed 0a f5 6d a4 2f 10 f9 8f e9 5d 3c da 14 f7 71 8c 40 15 58 8e d8 cd 5a ff 00 84 38 a5 b6 23 88 2c 85 70 0f bd 62 eb 46 c5 58 ca d5 b5 79 ee 34 92 3c d5 c7 f7 7b 9a e5 a3 d5 24 4b ad ee 9b d5 4f 19 ae d5 bc 1b 72 23 1b 86 70 0e 46 6a d6 91 e0 58 24 51 2d c2 61 bd 2a 63 5a 0a e1 63 89 b3 b9 bf d4 6e 86 63 20 37 b1 c7 15 df 78 73 c3 71 6c 8e e6 7c 97 03 23 1c 75 ae 8b 44 f0 ed 9d ac 2a 3c 85 66 Data Ascii: 5JVz?ik[7IIj?>9KpS95BYYxjV3,X}@3gkAdkUW9I>\nUm/]<q@XZ8#,pbFXy4<{$KOr#pFjX$Q-acZcnc 7xsql\|#uD*<f
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: f1 4e a1 a4 70 ac ca d8 5f d0 f5 1d 2b 95 57 a9 4e 4d 5a e8 df 93 9e 57 66 57 85 bc 37 74 96 2a 75 3b b6 66 2e 37 08 f3 83 f5 cf 38 cf e7 5d d4 7a 48 9e c0 41 06 ab 24 07 96 18 50 79 3e a0 9e 87 af 5a b7 a1 da da ea 72 cd 60 a0 a4 91 86 08 c7 27 25 4e 0e 7d 47 1d eb 1b 57 37 7a 6a 11 1b 79 6c 1f 95 0a 30 78 e9 d7 a8 e4 d7 3c a7 29 34 d9 d6 a9 c6 11 d3 63 9f d7 3e 1c 6b 92 df 49 73 67 ae da c8 41 dc 23 96 1d 8c 49 eb 86 04 8e 4f 1d ab 2b 50 f0 0f 88 21 b7 06 f7 48 2d 32 36 e1 3d b8 2f df a9 0b 9c 8e f9 02 ba 9f ed 2b 86 dd 34 d7 d7 2a b2 26 d1 e6 46 1a 33 ee 08 e7 3f d6 b2 b5 6f 1e 3e 8b ab 33 ff 00 6b df 98 ca 05 f2 a3 80 32 82 7d b1 d4 56 8a a5 5b 59 18 4e 9d 1d f6 31 35 2f 0f f8 be 1b 88 c5 b4 42 20 40 24 a1 31 a8 3d 89 18 1f fd 7a 74 fa 3f 8a ef 74 d3 Data Ascii: Np_+WNMZWfW7tu;f.78]zHA$Py>Zr`'%N}GW7zjyl0x<)4c>kIsgA#IO+P!H-26=/+4&F3?o>3k2}V[YN15/B @$1=zt?t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.25	64301	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:24 UTC	346	OUT	GET /th?id=OADD2.10239399230515_1O5S4SCQK1NL15G8R&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-01-07 17:03:24 UTC	861	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 458228 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A933A439F87D4DA49A0C1B15841DB803 Ref B: EWR30EDGE0311 Ref C: 2025-01-07T17:03:24Z Date: Tue, 07 Jan 2025 17:03:23 GMT Connection: close
2025-01-07 17:03:24 UTC	3517	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 39 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 38 3a 30 36 20 30 39 3a 35 35 3a 32 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.9 (Windows)2024:08:06 09:55:298C
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: eb d6 9a a3 0b c9 e3 19 ce 47 5a 91 57 be 30 7e b9 35 8c 99 b4 50 e5 5c f4 fc 3f 03 45 3d 06 5b 03 8e 71 8a 2b 16 6a 8d 40 87 a2 92 02 9e 9f 51 fe 7f 0a 55 55 dd d7 71 c9 1f 5e 7f 4e 94 f5 20 30 2a 39 23 a9 ee 71 ff 00 d7 a5 21 b9 18 38 07 a6 47 1e bc d7 ea 87 e4 11 dc 64 84 ee 00 8c 8e bc d2 30 21 40 38 2d 8c 67 e9 d3 ea 2a 42 32 a3 6e 49 1f 81 e3 e9 c5 1b 46 d5 2b d3 a6 7b 9f a9 ed 52 68 42 53 2c 11 80 c9 f7 f6 3d 4f 3f 9d 18 24 17 3b 8e 30 72 78 19 e9 f8 81 53 63 28 00 ef c7 6c 72 7a e3 e9 41 4d a0 90 70 18 9e 87 e9 d2 80 20 d8 76 94 60 72 00 1c 74 27 b6 69 ec 3a b6 33 d4 1c 76 18 e7 f1 a7 00 1e 3e 9f 32 80 46 40 19 1d 49 cf 5a 1c 17 e1 46 19 73 9d dd f3 db f0 14 08 6e d0 57 76 03 1d bc 67 3d 3f a7 e3 48 50 95 04 74 c7 24 0c 71 fe 39 a5 61 94 c8 c8 1c Data Ascii: GZW0~5P\?E=[q+j@QUUq^N 09#q!8Gd0!@8-gB2nIF+{RhBS,=O?$;0rxSc(lrzAMp v`rt'i:3v>2F@IZFsnWvg=?HPt$q9a
2025-01-07 17:03:24 UTC	4144	IN	Data Raw: e3 a7 14 ec 30 6e 38 c7 51 8e a6 95 40 e0 6e da a3 b7 a8 ed 58 dc d6 31 11 17 2b 9f ca a4 55 c0 ce 39 f5 a5 52 76 f1 d3 1c 8a 58 f8 c2 f4 18 3c 8e b8 ac a4 cb 42 e3 b8 e7 8e df e7 ad 49 10 f9 b3 ea 07 b5 47 9c 60 1c 80 4f 3e df fd 7a 7a 1e d8 38 e3 a7 ae 6b 39 3d 0d a3 a1 22 e0 a8 39 fa d4 8a 14 74 c8 2c 71 cf f8 53 14 e3 af 0d d8 1e bd e9 72 43 60 0e 3e 9c 56 12 35 88 e0 08 60 46 32 33 8c fa 8a 9e 35 f9 43 11 d6 98 ab bf e6 23 27 18 e3 db b9 a9 14 74 00 7f f5 ab 19 33 58 8e 5c 06 c9 3f 4c 7f 85 4c 9c 73 9c 0c f6 a8 97 8d ac 78 c1 e9 53 28 0c c0 8e bd 71 f5 e4 56 12 36 88 f4 07 1e dd 7a fa ff 00 4a 29 ca 09 6c 02 36 93 de 8a c9 c8 d2 c7 51 b7 39 19 cb 73 d4 8f f3 d2 ab c8 1f 76 0e 00 1c e0 0c 0f c6 a7 27 1f 2e 70 06 09 ec 4f d3 d7 9a ac a7 7a 83 c9 c1 dd Data Ascii: 0n8Q@nX1+U9RvX<BIG`O>zz8k9="9t,qSrC`>V5`F235C#'t3X\?LLsxS(qV6zJ)l6Q9sv'.pOz
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: 57 e5 04 20 39 00 64 7f 09 e0 9f cb f4 ab 44 49 95 f2 bb b0 33 82 7f 99 c5 21 24 b6 41 1b 81 20 60 76 3d 71 8a 9a 5d cb d5 86 dd c7 07 af a7 7f c2 a3 96 33 b8 04 18 2c 30 79 cf 39 c8 ad 08 90 df 99 58 a0 1f 30 c1 03 be 31 4d dc 77 63 9f 5c e3 af 4c d3 88 2c db 70 01 19 dc 17 3d bb f3 49 27 2d c8 24 bf 51 ec 3e 9d b3 4c 86 c4 1b 76 ef 28 db 49 39 e8 3d 78 1e b8 c5 0a a7 00 f5 07 9d b9 39 ff 00 10 7d bd 2a 45 53 bb ca 5e 9e b9 c1 20 f3 8c f6 18 a3 6e 50 ab 63 24 90 c7 eb 40 08 57 76 41 3c 1c 1f c4 ff 00 5a 49 01 2a 03 64 77 c0 c6 47 b5 39 7e f1 52 08 52 00 f4 c1 e9 f5 a1 53 e5 51 8c 6e 00 63 1c f0 71 f8 d0 26 c0 10 1b 61 c0 00 93 d7 1f 8d 2e 31 82 32 73 82 01 38 a6 af 08 40 5e 79 00 11 c9 3f cf 9e f4 fc 1d 87 19 5c 81 fc f8 fe 5d a8 1d c6 ae 47 1b 72 00 03 Data Ascii: W 9dDI3!$A `v=q]3,0y9X01Mwc\L,p=I'-$Q>Lv(I9=x9}ES^ nPc$@WvA<ZIdwG9~RRSQncq&a.12s8@^y?\]Gr
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: e1 fe 7f 2a 2c 1d 08 d8 65 42 8e e3 8e 39 eb 48 99 2e 0e 00 0b c0 03 1f 4c fd 2a 66 04 e1 40 cf 63 f5 1d 29 81 4e d0 33 85 e9 9c 71 cf 3c d2 b1 5c c4 78 1b 94 7c c3 82 4a e3 a7 3c fe 14 6d 0f d7 0a 72 70 bf 87 53 e9 52 60 6d 1c ed 6c 64 60 e7 27 eb 44 99 64 e7 ae 38 1f fd 6f 6a 96 5a 64 4c 88 58 e4 60 91 dc f2 3f 0a 6b 05 27 07 6e d6 eb 9e fc f4 fc 7a 54 f8 cb 36 78 5c e7 b7 41 4d 65 63 90 99 07 39 3f 4c 54 b4 5a 21 db 9c e3 e5 e4 e3 70 f5 ec 71 4c 75 c3 61 c7 cc 3a 77 fc ea cc c0 ba 8c 0c ed 3c 0c 75 a6 aa 6d 50 47 23 9f af 3f e7 a5 40 d1 03 a6 30 09 25 49 ec 7d 3d c7 5e b4 34 64 49 b7 9c 8f ef 0e 4f a8 a9 14 7c c4 04 07 f5 ef da 91 e3 2a 9f 70 af 62 b9 c9 39 fa d0 56 a5 74 42 8a 79 c6 4e 78 3c d2 b2 0e 49 3c fb 13 db a6 3d ea 65 5d ad bc e4 06 eb ed 48 Data Ascii: ,eB9H.Lf@c)N3q<\x\|J<mrpSR`mld`'Dd8ojZdLX`?k'nzT6x\AMec9?LTZ!pqLua:w<umPG#?@0%I}=^4dIO\|*pb9VtByNx<I<=e]H
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: 00 92 dd 08 3d b2 3a 53 11 94 ae 46 77 1e 48 27 b7 a0 a2 f7 15 84 8d 24 e0 8f bc 0f a7 50 29 45 b9 56 ce 42 ee 19 c0 f5 ef 56 22 0a 54 92 30 07 b1 ea 3a d4 fb 37 29 07 27 a7 06 9d c0 ca b8 89 b6 82 83 e6 e8 4f 6a 4c 12 cd 9e 85 70 70 3a 1e bd bb 56 a4 90 02 84 aa 90 46 00 cf 1f 51 c7 7a a7 24 7f 31 04 e0 01 8f 97 a1 38 fe 54 9a 34 8b 4b 72 ba a9 1c 27 4c 67 77 d7 ff 00 ad 43 c4 33 f5 e8 07 3d ea 47 4c 30 ca 1e 30 40 20 f2 40 c9 a6 81 b4 e4 82 71 8f d7 a6 73 52 b7 2a e8 85 94 f0 09 f9 ba 9c 0c 60 e3 d6 9b 82 dc 2e 73 ce 08 fb b8 1e 86 a6 65 01 77 6c 6e 3a 1c 64 73 9f ff 00 56 29 8d ca 64 e0 2f 4f f1 1f 4a 96 57 32 1b 8c e0 e0 f2 08 f6 e0 d2 81 86 d9 d4 e0 e0 37 1d e8 db f2 a8 20 1c 02 71 93 f9 67 b9 a5 52 4b 13 93 82 00 20 8c e4 83 40 0d 50 15 88 20 8f a7 Data Ascii: =:SFwH'$P)EVBV"T0:7)'OjLpp:VFQz$18T4Kr'LgwC3=GL00@ @qsR*`.sewln:dsV)d/OJW27 qgRK @P
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: a4 38 fb f9 c6 08 c9 f4 f4 a7 32 90 cc 76 8c 81 9e b8 cf a7 e7 43 12 dc 8c 8d ca 06 72 39 1c f3 9f c4 7e 14 e2 80 28 3c 67 a3 64 d4 72 0f 98 80 ed 9e 9c 1c 73 f8 7f 9c d3 86 13 07 19 38 27 3d 7d e8 18 30 ca 8e a5 94 76 5c e4 74 e6 93 69 0d cf 43 9e 7d bd ea 62 41 62 18 72 7b 67 ae 7f 2e 69 ca 8a 30 06 7d c7 51 93 db f4 a4 1d 4a 65 18 36 4e 18 11 f2 af 50 4f a7 e1 48 e9 8c 8c f3 9c 7a 0f a7 d2 ad ec 51 c7 66 19 c7 5c 03 c5 26 d1 b0 8e a4 f7 e7 18 f6 a7 b8 6a 53 55 2a d9 18 e3 3c 0e 87 dc fb 52 6c dc c3 38 2c 07 38 ed 53 f9 3f bc 1c a8 ec 72 7b 0f e6 29 55 36 b6 d5 e0 75 24 74 1f e3 e9 50 ec 51 58 8c 73 b3 83 8c 0f 5e 7a 52 31 03 86 fb b8 c6 71 dc 67 a1 a9 b6 1e 72 70 a7 91 eb f8 7a d3 19 70 b9 ce 31 e8 78 e7 9c d0 04 7b 88 e5 b0 70 3d 08 fe 54 e5 18 60 31 Data Ascii: 82vCr9~(<gdrs8'=}0v\tiC}bAbr{g.i0}QJe6NPOHzQf\&jSU*<Rl8,8S?r{)U6u$tPQXs^zR1qgrpzp1x{p=T`1
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: cd 35 9b 70 3e a3 f4 a8 d9 b3 92 38 1e bf 5a de 14 d9 94 aa 24 2b 30 56 03 d3 34 c6 21 78 1c 13 de 9b 23 fc bc 71 cf 7f f0 a8 59 fe 5c 9f 4c 8c 73 5d 31 a4 ce 79 54 44 8f 21 e9 db 3e 9f ce 9b 23 82 a0 0f a9 c7 f2 a8 64 95 43 02 49 c5 44 f3 15 e7 f8 7b 7d 3d 2b a2 34 75 d8 e7 95 65 dc 96 49 31 83 c1 27 d6 a9 cd 29 8f 3f c3 c8 c5 36 e2 72 10 e4 e0 72 07 ad 66 5d dc 6e 6e 3a e7 03 3d ab d2 c3 e1 5b 3c fa d8 94 89 e4 9f 73 fd ee a7 bf 5a ab 70 ef d7 20 60 9c 0f 7c 53 63 93 0c 01 1d b8 f7 c9 a8 ee 0f 52 38 ed ef c7 ad 77 c2 97 2b 38 5d 4b a2 ad c4 81 81 da 70 73 c6 4f 53 51 ac 84 27 3b 41 1f 98 a6 c8 00 7c f1 ed cf 4a 06 37 71 d4 f7 ed c7 ad 77 f2 ab 1c 37 6d 92 3c b9 50 47 4c e4 7e 5d cd 46 6e 18 af cc 4e 00 38 e3 f9 fa d2 15 63 93 bb 81 8a 52 84 b3 11 d3 19 Data Ascii: 5p>8Z$+0V4!x#qY\Ls]1yTD!>#dCID{}=+4ueI1')?6rrf]nn:=[<sZp `\|ScR8w+8]KpsOSQ';A\|J7qw7m<PGL~]FnN8cR
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: 27 81 cf 1f 5c f3 46 a2 1a a7 2c 06 3e 62 7a 71 ff 00 eb a6 30 1d 01 e0 77 1d b8 a9 76 96 6e 07 7e 48 e8 3e 9e 94 d2 80 2f 20 0e df 4a 6c a4 8a fb 71 9f 51 c7 5e 4d 36 45 66 6c 1e 70 39 e7 9e 7e 95 68 a6 1b 23 a0 1f 51 4d db b5 78 03 9e 72 3d 7d fe 82 b3 b9 a1 5d 90 af 20 e4 03 e9 41 2d b7 d5 8f 40 79 ab 0c 36 e0 8f 5c 12 0e 73 9a 8c a0 2d f3 8f 53 c7 1c fa e2 81 11 b1 0d c9 e4 71 ff 00 d6 cf ad 35 97 00 b0 2d db 81 fe 7b d4 eb 19 3c 73 92 0e 01 eb 4c 90 63 9f 53 d3 dc 7f 85 3b 8d 10 c8 33 80 06 32 39 1e 87 ff 00 ad 51 c8 a3 70 00 92 dd 7f ad 48 c3 76 4a 92 71 93 d7 b5 46 c7 a0 e7 b7 f9 34 14 34 82 38 23 3f 8f 5c f3 f8 d3 1c 11 db af 6e 79 a9 5b 8e 3b 95 e4 f6 07 b0 cd 00 11 d3 19 5e c7 d0 d2 63 44 0c bf 29 c8 c0 ed 9f e7 48 aa a5 49 39 e3 07 9e f5 60 fa Data Ascii: '\F,>bzq0wvn~H>/ JlqQ^M6Eflp9~h#QMxr=}] A-@y6\s-Sq5-{<sLcS;329QpHvJqF448#?\ny[;^cD)HI9`
2025-01-07 17:03:24 UTC	8192	IN	Data Raw: 61 2d fe 6e 23 2c dc e4 6e 20 93 9f c4 fe 95 c0 7c 5d d7 23 9a f3 47 bc 73 98 ec e7 58 e6 20 67 04 82 0e 71 f8 57 5b 6b ad 6b 8f a7 ed 48 e1 60 ca 43 18 c7 1f 87 3c 9a f3 2f 13 d9 de ea da 16 aa e2 26 91 e0 22 4c e7 1b 48 6c e7 1f 85 7a 8a 51 e4 d1 dd ed fd 7c cf 1e bf b6 ab 5d 4a 4a d1 8b bf e3 6f c8 bd f1 5b 57 59 3c 1c c9 0c 44 ab e1 77 f6 24 e4 71 5e 6f fb 36 b6 bb 2e a5 aa c1 a7 c6 26 b5 9c a2 dc 23 b0 5d 84 1e 18 03 d7 a1 18 af 44 d7 a3 fe d1 d2 f4 c4 c7 9b e6 a7 9c 47 41 b4 2e 40 c7 d4 d7 3b fb 23 a8 87 c5 da f4 00 63 21 59 54 72 30 58 fe 55 dd 88 a9 2a 91 a2 f6 b3 5f 89 c5 95 e1 e9 d2 cc 71 0d eb cd 16 ff 00 f0 17 63 e8 3d 31 5b ec eb 90 7a 0f e5 cd 5e 51 dc e3 a7 71 da a3 86 30 8b 80 30 4f 40 6a 5c 01 9c fd ee b8 eb 5d f6 b2 b0 a5 2e 69 36 20 4c Data Ascii: a-n#,n \|]#GsX gqW[kkH`C</&"LHlzQ\|]JJo[WY<Dw$q^o6.&#]DGA.@;#c!YTr0XU*_qc=1[z^Qq00O@j\].i6 L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.25	64302	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:24 UTC	375	OUT	GET /th?id=OADD2.10239402456886_16PSERWAUMTCB5AWR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22631 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-01-07 17:03:24 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 700910 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 2BA822F4D1E54BBF955892BBEF27CDD2 Ref B: EWR30EDGE0420 Ref C: 2025-01-07T17:03:24Z Date: Tue, 07 Jan 2025 17:03:23 GMT Connection: close
2025-01-07 17:03:24 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 19 70 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 30 39 3a 31 32 20 30 39 3a 34 35 3a 33 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``pExifMM*bj(1 r2i``Adobe Photoshop 25.11 (Windows)2024:09:12 09:45:308
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: dc 2d 3b cd dd 59 f1 9f e2 a9 e3 7f ef 56 2e 07 64 2b 36 59 5f 9a ad 43 b5 63 aa 2b 2e df bd 4e 59 ea 1c 59 d1 09 a4 cd 05 7c a5 0d 54 e3 97 fb b5 65 7e 68 eb 2b 1d 0a 57 21 99 15 6a 06 3b 6a d4 89 ba 3a ad 34 55 71 66 75 23 d8 85 9e 9c ae cd 4b e5 ed f9 5a 9f 1d bb 79 95 7c c8 ce 31 95 f4 25 b5 dc b5 72 12 cd f7 aa bc 31 35 5a 8e 37 58 eb 9e a6 a8 ee a5 16 b7 0c bd 23 1d b1 d3 f6 ee a6 b4 75 99 b1 04 87 75 26 76 d4 92 22 ff 00 0d 31 85 68 64 c6 6e dd 4a b4 8a 36 fd da 75 02 57 ea 2e 29 79 a6 35 25 05 16 63 7a 95 65 5a a8 bf eb 2a 65 f9 ab 39 24 6b 09 74 27 56 cd 3a a3 53 52 2d 66 6c b7 17 34 8d 43 50 a3 75 51 4c 86 40 d4 2a 54 db 68 61 b7 ee d3 b8 ad 61 98 a5 51 4e db ba 9c d1 e2 a6 e8 a4 86 ad 49 48 a9 4b 50 cd 05 c5 25 3b 63 35 0d 1b 50 52 8b 62 66 93 Data Ascii: -;YV.d+6Y_Cc+.NYY\|Te~h+W!j;j:4Uqfu#KZy\|1%r15Z7X#uu&v"1hdnJ6uW.)y5%czeZe9$kt'V:SR-fl4CPuQL@ThaaQNIHKP%;c5PRbf
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: 82 9b e4 53 e7 f3 17 b2 66 76 c7 a3 15 a0 d1 54 4d 15 1c d7 27 d9 b2 a6 29 b8 7a b9 e5 37 ad 23 5b b5 3e 64 2e 49 76 29 c9 b9 be 5a 8b cb 66 ab ed 68 d4 7d 91 ea f9 d0 bd 9c 8a 1e 55 1e 55 5d 6b 66 a6 b4 0d 47 b4 17 23 2b f9 6a b4 2a 55 9f 2f fd 8a 4d 94 b9 82 cc 8b 14 6c a9 76 bd 35 92 8b 80 cc 52 54 9b 1e 93 63 d1 cc 80 89 82 d3 bc b1 52 6d a7 6c a7 74 04 3e 5d 2a a5 4b e5 d1 b2 8b a0 23 d9 4e 54 a7 ec 6a 55 0d 53 cc 01 1a 62 9d 45 3a a4 ae 51 56 96 91 6a 68 63 a0 b4 ae 22 a5 4d 18 a5 50 ab 4b be 95 cd 03 3b 69 b2 3b 52 e5 2a 19 0e ea 10 9e 88 63 1a 6f 34 e6 a6 d3 32 6a e1 4e a4 c5 18 a0 5c a2 ee f7 a5 cd 31 45 3b 6f b5 02 e5 62 e6 96 93 14 e5 14 0f 94 31 46 29 d8 a5 a0 ab 58 6e ca 36 53 f1 4b 40 0d db 46 d5 a5 c5 2e ca 00 f9 0e 8d be d5 63 cb a3 cb af Data Ascii: SfvTM')z7#[>d.Iv)Zfh}UU]kfG#+jU/Mlv5RTcRmlt>]K#NTjUSbE:QVjhc"MPK;i;R*co42jN\1E;ob1F)Xn6SK@F.c
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: 9f 74 87 6b 3a 46 ff 00 27 f0 ff 00 08 e3 6d 7a 3f 85 7e 34 5c db f8 e3 5c f0 ef 8a b4 d8 19 b4 db eb 48 2d 2e 74 97 69 7c e8 e7 8c ed 73 8c e4 ee 1f 37 4d bc fa 57 96 f8 ba df c4 2d aa f8 ff 00 52 d4 12 4d 37 4b f1 1d c5 ba e9 da 4d c5 ac 92 b6 d8 2e b6 cd 3c 81 55 d1 7c c6 4d 8b 2b ed dd bb 8e 29 b9 a6 b4 35 a7 15 f0 b6 70 fe 17 f1 ee b5 aa 78 ff 00 50 f0 0d af 89 27 d2 34 3d 0d d6 2b 1f ec bd ad bd 93 83 2a 12 ca db 59 b7 31 db 9f bd d1 ba 57 d1 7f 06 fe 22 5e 5e ea a9 e1 5f 15 5b c7 61 a8 25 8b 35 a4 2f 04 91 4b 37 97 ee ff 00 7b 72 6d 61 eb cd 7c 4d f1 1b 4c f1 8f 80 fc 7e fe 22 b3 8e f9 6f b5 29 a3 68 7e d6 9b 99 d8 f3 fb c8 ff 00 85 ba ed ff 00 76 ba ff 00 83 77 f7 3f 15 6f bf b1 61 82 ea f3 c4 91 5a 48 af 35 dd d2 c5 f3 27 cf c3 6d d9 12 77 6d dd Data Ascii: tk:F'mz?~4\\H-.ti\|s7MW-RM7KM.<U\|M+)5pxP'4=+*Y1W"^^_[a%5/K7{rma\|ML~"o)h~vw?oaZH5'mwm
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: fe 71 56 24 1b 2d de 49 3e 58 d7 ef bb fd d4 c7 bd 0c 36 c8 8a de 5e e6 fb 9f ed e6 a7 98 af 66 8a fe 4f f9 c5 1e 4f f9 c5 43 ac 6b 1a 46 91 1b ff 00 6b 6b 5a 6d 86 d4 dd b2 e2 e9 55 b6 ff 00 ba 79 ae 4a fb e3 07 80 ad e4 db 0e a5 77 79 ff 00 5e 96 ad b5 ff 00 17 db 4b da 25 bb 1f b2 3b 3f 27 fc e2 9c b1 57 95 ea 1f 1d 74 f5 df fd 9f e1 7b e9 7f db bb ba 8e 2f fd 07 75 67 49 f1 e6 f9 a7 db 1f 85 ec 62 5f fa 6d a8 b7 fe ca b4 bd b4 7b 8b d9 9e cd e5 d2 ec db f7 ab c4 64 f8 e3 e2 c7 83 74 3e 17 d2 95 9b 72 a3 a4 f2 4a bb bf 0a 2d fe 32 78 cd ad 5e 4b ad 33 43 b5 ff 00 7e 09 3f f8 e5 43 c4 d3 5d 4d 23 42 4f 64 7b 92 a5 71 7f 1c 07 8e 1f c2 b3 5a f8 1e 0b 1b 8b 86 85 be dd 15 df 99 17 9d 09 f9 36 c5 70 ac 3c a9 3e f7 38 6a f3 dd 43 e3 2f 8a 9a 37 85 67 d1 ec Data Ascii: qV$-I>X6^fOOCkFkkZmUyJwy^K%;?'Wt{/ugIb_m{dt>rJ-2x^K3C~?C]M#BOd{qZ6p<>8jC/7g
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: 90 9d 63 a0 d4 12 55 8f ce 8e ee 48 b6 fd f4 fe 1a c9 9b 54 d4 e0 fd dc 70 6e 8d b6 ff 00 1f f0 fd 3a d2 e9 ba ac f0 48 ed 24 7e 6f fc 0f 6d 1a b5 cf da 2e bf d1 e3 91 55 b6 b7 c9 fc 1e b5 31 c3 b8 bf 78 ce 55 6e ae 8c cd 4a 5b 99 67 7f 33 cc 56 6d bf 22 7f 76 a9 db c5 b6 b5 2f a2 b9 97 e6 69 24 b8 ff 00 6d 2a 6b 7d 22 54 d8 d7 5f ba dd fe ed 75 42 36 47 1c ae d9 1e 93 2b 5b c8 ed fe a9 7f 8d f6 2b 56 ad 9d bc 1f 6a 85 6e 20 93 51 93 67 fa 97 76 55 4e fd 14 fe 94 cf 2f 4f 82 34 8e 19 24 95 99 3f 7d bd 17 6e ea b1 63 6f a7 ad d2 7f af 95 77 ff 00 bb 57 18 ea 0e 4d 23 5b 47 b2 b3 82 74 be 9b 45 b1 ba 93 ee bd a3 a3 79 0f f3 7c c7 e4 fb ad fe ed 63 f8 8b c3 9a 2f 8b e4 be 8d b5 2b ad 1a 6b 0b b5 df 63 0e 97 24 b6 68 c3 e5 56 82 47 2c fc 47 bf af cb e6 73 85 Data Ascii: cUHTpn:H$~om.U1xUnJ[g3Vm"v/i$m*k}"T_uB6G+[+Vjn QgvUN/O4$?}ncowWM#[GtEy\|c/+kc$hVG,Gs
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: f6 5a 9d ec 63 65 f2 2c 7f 75 77 2f fc 05 bf c2 b4 61 8f fd 2b cb 68 f6 fc 9b ab 22 49 ed a2 be f2 d6 ee 39 5b 7e e4 74 fe 35 db 91 b5 ba 1f f3 de a9 6a 5e 2d b6 83 5c b1 ba 9b cc 5d 36 5d ca f7 7f 2b 2a 36 ec 21 35 9a cc b5 b5 f5 2f d8 79 1a 5a a6 b9 67 61 6b 0e a0 d7 7b ac e5 9a 15 fb 9b 59 19 db 66 1b 3e fe dc 53 1b 54 df 63 70 cb f2 ad ab b3 3b be ef bc 1b ee ff 00 df 35 e7 3a 96 8d 2d ae ab a8 6a d3 5d fd b3 47 b5 d5 17 ed 70 c2 ff 00 ba 86 37 6f 95 e4 7e 3e 50 dc 65 41 da d8 f5 ae c7 4f f1 0d 8f cf e4 db c8 b0 de 6e 57 f3 a7 56 de db 89 57 f9 47 dd db fa 56 75 73 3a 9a 2e 81 1a 31 2f c9 ac 45 a8 f8 82 df c9 93 75 be c5 6d 89 fc 6d b8 ff 00 fa ff 00 e0 35 47 c6 17 1a ae 8d ae 4d 36 8b 27 d9 ed 75 24 f3 ee f6 41 b7 f7 9d 17 f7 9c ff 00 86 3e b4 6b 12 Data Ascii: Zce,uw/a+h"I9[~t5j^-\]6]+*6!5/yZgak{Yf>STcp;5:-j]Gp7o~>PeAOnWVWGVus:.1/Eumm5GM6'u$A>k
2025-01-07 17:03:24 UTC	16067	IN	Data Raw: 41 21 23 cc 59 83 f5 e1 54 06 c9 ae ba 39 d3 8d 29 ca b4 39 db 8b bb db 47 ab df 6d f6 fc 88 9e 52 ef 05 19 72 a5 25 6f 55 6b 2f c3 fe 1c 5d 78 c8 9e 22 58 fe cb 1c ad bd a7 de 8e df b9 9b 6e e2 41 eb ed f7 bd e8 d1 4c 4d aa a2 ea 57 72 5d 48 d3 46 c8 f7 69 bb c9 c3 70 db fa ae de c3 6e 3d e9 3c 49 a4 6a 7a 5e a5 0c 7a f4 71 d8 4c af b9 fc 97 93 e4 64 67 f9 9d 59 b3 f4 28 4e 7d 6a e5 bf f6 9e 8d 7c aa b6 89 7e d1 24 93 ba 5d c7 34 f0 3c 6f f7 2e 03 01 db ef 61 b7 86 ef 5e ce 03 3b c0 62 f0 1e ce 3f 12 8e cf aa 49 6a ad ba fe 99 11 c1 e2 b0 d8 c4 e7 2b c2 4d df b6 b7 fc 4d 4d 26 3b 9d 26 c7 56 d1 66 b0 d3 75 6b 3b 89 bf d2 3c 9b e5 dd 0c 88 cf 89 51 b3 bd 18 ff 00 2a ab ab e9 3a 62 df a3 5a df 41 67 6f 70 8b 24 36 f7 2f 24 ac ff 00 bb de ea ae a3 e7 0a dc Data Ascii: A!#YT9)9GmRr%oUk/]x"XnALMWr]HFipn=<Ijz^zqLdgY(N}j\|~$]4<o.a^;b?Ij+MMM&;&Vfuk;<Q*:bZAgop$6/$
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: ee d6 4f 89 b5 59 e7 f0 fd f5 be 83 7f ff 00 13 06 85 96 de 64 fb a8 df ef 30 23 f4 6a ce 5c 91 57 65 43 9e 4e cb 53 e6 5f 8e 1e 04 f1 7e 8d 07 89 35 2d 07 ec 31 69 f7 53 5c 6c b6 48 21 ba 9f ed 12 28 69 86 cd a7 63 2a ee 3b 8f 2a 3e b5 e4 b6 76 0d a3 78 72 dd 56 ef 4d f3 99 3f da 66 7c af 3f 2f f0 7d 7b d7 ae fc 7a f1 a6 b5 a5 c7 35 8d ac 7f d8 d6 73 eb 9b ae de c6 06 59 ef 6e 3c b1 e7 4e d2 e4 7c bb 97 8e 17 95 f4 af 1a d5 23 fb 54 e9 b7 56 fb 55 ad c4 b2 5c dc 3d c7 cb fb b0 b8 ce ff 00 ef 96 fd 6b e6 2a d4 84 a5 ee 3d 2e 7a 13 52 5a 49 6b 63 9b f2 60 d3 75 19 a4 f3 37 6d 85 65 44 fb cb b8 fd ee dc d7 41 f0 e7 5f fb 05 f2 43 71 24 9f 3c de 55 bf 9d b7 ca 48 4a 9f 94 f7 fb dd eb 95 d2 6e 60 8b ed 16 ba 94 72 4b 22 a6 db 44 7d df 22 f9 9f 36 ee 9b be 5a Data Ascii: OYd0#j\WeCNS_~5-1iS\lH!(ic;>vxrVM?f\|?/}{z5sYn<N\|#TVU\=k*=.zRZIkc`u7meDA_Cq$<UHJn`rK"D}"6Z
2025-01-07 17:03:24 UTC	16384	IN	Data Raw: 4f 33 4d 16 e5 cd 43 40 b3 7d 37 6c 7f 6a 5d a9 b5 de 6f 9b 64 83 ef 6d 38 1f 2d 73 37 5a 7b 59 6c fb 47 ca df c6 8f 5a 5a d6 b1 aa cb 75 b6 ea ef e5 57 6f b8 ff 00 2b e7 da b0 6f 9d a5 9d e6 69 24 66 6f bf be bb 69 f3 2d c9 24 f2 2d 9e 44 fd e6 d6 ad 2f 0d bc 56 ba 8c 3b 6e 36 cd bf 72 4d bd 97 66 2b 09 9d 97 66 da d3 f0 ed a4 f3 df 24 de 5f ee e2 f9 9e b5 92 ba 26 5b 1a fa c5 bc af 3c df 6a 92 49 6e 1a 66 67 7d fb b7 e7 9f bd fc 59 ac 1b cb 29 6d 6e bc b9 23 92 26 fb d5 b3 34 eb 3c ee cd bd 57 7f c9 fd e4 a8 e6 3e 6e b9 0a c3 77 e6 af d9 fe fc c8 ab f8 71 53 1d 11 25 3d 27 cf fd f4 d7 5f 77 67 df 7a 8f 52 9d ae 23 85 be cf 02 ed f9 7e 44 fb ff 00 5a b7 e2 49 d6 de 4b 7b 58 7e 56 d9 fe 91 b1 fe 57 63 55 2e 24 ff 00 45 f2 7f ba fb 92 ae f7 03 5b 43 bf 9f Data Ascii: O3MC@}7lj]odm8-s7Z{YlGZZuWo+oi$foi-$-D/V;n6rMf+f$_&[<jInfg}Y)mn#&4<W>nwqS%='_wgzR#~DZIK{X~VWcU.$E[C

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.25	64304	2.23.227.197	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:43 UTC	881	OUT	GET /service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=34640ee7-1169-4cdf-9972-6f6462080122&user=m-339A2A61895267C400B83F3088FA6607&cm=de-ch&caller=bgtask&theme=light&nw=false&msrc=2&it=app&scn=al_app_anon&clientFeatures=1 HTTP/1.1 Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate muid: 339A2A61895267C400B83F3088FA6607 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0 Host: assets.msn.com Connection: Keep-Alive Cookie: MUID=339A2A61895267C400B83F3088FA6607
2025-01-07 17:03:44 UTC	3672	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-TMPL: XFeed;spotlight:1;RR:0;ATFSignalTriggered:1;click28d_0;TaggingUserActionSignal;cptvtn_a-0_sr-0_nw-0_t-0;tmpl-video;PageViewCount0;tmpl-promotedad:1;FCRelBarP_0.32;TileID:dr5r;wxunt:_C;triggercf;RelevanceWarmUser;StrongDemotionV2Trigger:0;1s-ondemand-promotedad;IsRecoNewUser:1;IMArticleNegUser:0;RecoSource:Notification_;wpo-coldstart:1;P2DeviceWithEL;ULatLon40.75:-73.99;StableIdCS:339A2A61895267C400B83F3088FA6607;triggercf_5_cfxeverything_0;tmpl-1spromoondmd;WxCardValid:1;UserHasActionSignal:0;v_MainFeedsColdUser:true;tmpl-cc;SageUser:0;FCSupply#2\|81_3\|42_4\|12;eePosList:0;WxLockScreen:Weather3DLock_Nowcast;UserProfileActionSignal:0;InterestCount:0;UserCohortByEngagement28d:0;GANone:1;FCTarget\|4\|0.6_2\|0.33_3\|0.07_0\|0.15;ClickCohort:0;MyFeed;ExplcitFollowCohort:0;GEM:C;numofmutepub:0;XAIG:100_0;FixIds:0;wxpkg:1.866.0;tmpl-cgtopstories:1;click_0;tmpl-tmpltlayout;UIC#t1_6\|0\|0\|0.26;v_click_0;tmpl-pr2wbv2:1;v_click28d_0;winbadge:1;RecoSource:Sage_;SageUserStatus:0_0_0_0;LTInterests:;BingRecoCode:Success;FC [TRUNCATED] DDD-StrategyExecutionLatency: 00:00:00.6338541 x-wpo-activityId: B934F007-6580-4238-92B7-10EC930CF144\|2025-01-07T17:03:43.8707506Z\|fabric_wpo\|FRC-C\|WPO_661 DDD-FeatureSet: 0,Msn.OneDataService.Search.FeatureTracker.Models.NewsFeedFeature:wgAA; DDD-ActivityId: b934f007-6580-4238-92b7-10ec930cf144 DDD-FeedNewsItemCount: 31 DDD-TMPL-Removed: False DDD-DebugId: b934f007-6580-4238-92b7-10ec930cf144\|2025-01-07T17:03:43.8975666Z\|fabric_winfeed\|FRC-C\|WinFeed1_1501 DDD-Auth-Features: AT:NA;DID:m-339A2A61895267C400B83F3088FA6607;IT:App;MuidStateOrigin:MuidFromHeader OneWebServiceLatency: 635 X-MSEdge-ResponseInfo: 635 X-1S-FallbackReason: RetryOnThrottling X-Ceto-ref: 677d5e6ffe6143e5be95ea1b4ce0fef9\|AFD:677d5e6ffe6143e5be95ea1b4ce0fef9\|2025-01-07T17:03:43.255Z Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E7B3C8C041774125B29574A9C1210D98 Ref B: FRA31EDGE0713 Ref C: 2025-01-07T17:03:43Z Expires: Tue, 07 Jan 2025 17:03:43 GMT Date: Tue, 07 Jan 2025 17:03:43 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Set-Cookie: msnup=; expires=Thu, 20 Feb 2025 17:03:43 GMT; domain=.msn.com; path=/; secure; samesite=none; httponly Set-Cookie: MUIDB=339A2A61895267C400B83F3088FA6607; expires=Sun, 01 Feb 2026 17:03:43 GMT; path=/; httponly Set-Cookie: _EDGE_S=SID=1740EF8F1B3F6A4D2123FAE21AD06BBF; domain=.msn.com; path=/; httponly Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=2.20.196.216,b=2153908121,c=g,n=DE_HE_FRANKFURT,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=86, clienttt; dur=665, origin; dur=665, cdntime; dur=0, wpo;dur=27,1s;dur=567 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 2.20.196.216 Akamai-Request-ID: 80620799 X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.d8c41402.1736269423.80620799 Vary: Origin
2025-01-07 17:03:44 UTC	12712	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 7b 22 6e 65 78 74 50 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 73 6e 2e 63 6f 6d 2f 6e 65 77 73 2f 66 65 65 64 2f 70 61 67 65 73 2f 64 61 73 68 62 6f 61 72 64 34 3f 61 63 74 69 76 69 74 79 49 64 3d 33 34 36 34 30 65 65 37 2d 31 31 36 39 2d 34 63 64 66 2d 39 39 37 32 2d 36 66 36 34 36 32 30 38 30 31 32 32 26 74 69 6d 65 4f 75 74 3d 32 30 30 30 26 6f 63 69 64 3d 77 69 6e 70 32 77 69 64 67 65 74 26 73 63 6e 3d 61 6c 5f 61 70 70 5f 61 6e 6f 6e 26 61 70 69 6b 65 79 3d 6c 78 53 4e 74 69 62 64 5a 34 35 61 50 65 38 42 48 75 55 52 36 58 77 68 75 75 72 75 59 66 77 65 6a 45 59 4e 70 53 71 67 63 64 26 63 6d 3d 64 65 2d 63 68 26 55 73 65 72 3d 6d 2d 33 33 39 41 32 41 36 31 38 39 35 32 36 37 43 34 30 30 42 38 33 46 Data Ascii: 0000C000{"nextPageUrl":"https://api.msn.com/news/feed/pages/dashboard4?activityId=34640ee7-1169-4cdf-9972-6f6462080122&timeOut=2000&ocid=winp2widget&scn=al_app_anon&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&cm=de-ch&User=m-339A2A61895267C400B83F
2025-01-07 17:03:44 UTC	16384	IN	Data Raw: 6e 20 61 62 20 e2 80 93 61 6e 67 65 66 61 6e 67 65 6e 20 62 65 69 20 64 65 72 20 45 72 6e c3 a4 68 72 75 6e 67 20 75 6e 64 20 64 65 72 20 61 6c 6c 67 65 6d 65 69 6e 65 6e 20 50 66 6c 65 67 65 20 62 69 73 20 68 69 6e 20 7a 75 20 77 65 69 74 65 72 65 6e 20 4b 72 69 74 65 72 69 65 6e 20 77 69 65 20 52 61 73 73 65 20 75 6e 64 20 47 72 c3 b6 c3 9f 65 2e 20 41 6c 6c 67 65 6d 65 69 6e 20 6c c3 a4 73 73 74 20 73 69 63 68 20 73 61 67 65 6e 2c 20 64 61 73 73 20 6b 6c 65 69 6e 65 20 48 75 6e 64 65 20 65 68 65 72 20 6c c3 a4 6e 67 65 72 20 6c 65 62 65 6e 20 61 6c 73 20 67 72 6f c3 9f 65 2e 20 48 69 65 72 20 65 72 66 61 68 72 65 6e 20 53 69 65 2c 20 77 65 6c 63 68 65 20 48 75 6e 64 65 72 61 73 73 65 6e 20 64 69 65 20 67 72 c3 b6 c3 9f 74 65 20 4c 65 62 65 6e 73 65 72 Data Ascii: n ab angefangen bei der Ernhrung und der allgemeinen Pflege bis hin zu weiteren Kriterien wie Rasse und Gre. Allgemein lsst sich sagen, dass kleine Hunde eher lnger leben als groe. Hier erfahren Sie, welche Hunderassen die grte Lebenser
2025-01-07 17:03:44 UTC	2565	IN	Data Raw: 74 69 74 79 69 64 2f 41 41 31 77 50 6d 46 32 2e 69 6d 67 22 2c 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 41 75 74 6f 63 61 72 22 2c 22 74 69 74 6c 65 22 3a 22 44 69 65 20 55 72 73 70 72 c3 bc 6e 67 65 20 76 6f 6e 20 6d 65 68 72 20 61 6c 73 20 36 30 20 41 75 74 6f 6d 6f 62 69 6c 68 65 72 73 74 65 6c 6c 65 72 6e 20 73 69 6e 64 20 68 69 65 72 20 61 75 66 67 65 6c 69 73 74 65 74 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 3c 70 3e 4b 61 72 6c 20 42 65 6e 7a 20 62 61 75 74 65 20 31 38 38 35 20 64 61 73 20 65 72 73 74 65 20 41 75 74 6f 2e 20 53 65 69 74 64 65 6d 20 73 69 6e 64 20 54 61 75 73 65 6e 64 65 20 76 6f 6e 20 55 6e 74 65 72 6e 65 68 6d 65 6e 20 61 75 73 20 64 65 6d 20 42 6f 64 65 6e 20 67 65 73 63 68 6f 73 73 65 6e 20 75 6e 64 20 68 61 62 65 6e 20 76 65 Data Ascii: tityid/AA1wPmF2.img","attribution":"Autocar","title":"Die Ursprnge von mehr als 60 Automobilherstellern sind hier aufgelistet","caption":"<p>Karl Benz baute 1885 das erste Auto. Seitdem sind Tausende von Unternehmen aus dem Boden geschossen und haben ve
2025-01-07 17:03:44 UTC	16384	IN	Data Raw: 22 3c 70 3e 50 65 75 67 65 6f 74 20 62 65 67 61 6e 6e 20 31 38 34 32 20 6d 69 74 20 64 65 72 20 48 65 72 73 74 65 6c 6c 75 6e 67 20 76 6f 6e 20 53 61 6c 7a 2d 20 75 6e 64 20 50 66 65 66 66 65 72 6d c3 bc 68 6c 65 6e 20 75 6e 64 20 73 74 69 65 67 20 34 30 20 4a 61 68 72 65 20 73 70 c3 a4 74 65 72 20 69 6e 20 64 69 65 20 46 61 68 72 72 61 64 70 72 6f 64 75 6b 74 69 6f 6e 20 65 69 6e 2e 20 31 38 39 31 20 62 61 75 74 65 20 50 65 75 67 65 6f 74 20 64 61 6e 6e 20 73 65 69 6e 20 65 72 73 74 65 73 20 41 75 74 6f 2c 20 65 69 6e 65 20 76 69 65 72 72 c3 a4 64 72 69 67 65 20 4d 61 73 63 68 69 6e 65 20 6d 69 74 20 65 69 6e 65 6d 20 68 69 6e 74 65 6e 20 6d 6f 6e 74 69 65 72 74 65 6e 20 56 2d 5a 77 65 69 7a 79 6c 69 6e 64 65 72 6d 6f 74 6f 72 2c 20 64 65 72 20 64 69 65 Data Ascii: "<p>Peugeot begann 1842 mit der Herstellung von Salz- und Pfeffermhlen und stieg 40 Jahre spter in die Fahrradproduktion ein. 1891 baute Peugeot dann sein erstes Auto, eine vierrdrige Maschine mit einem hinten montierten V-Zweizylindermotor, der die
2025-01-07 17:03:44 UTC	1119	IN	Data Raw: 69 65 73 22 3a 5b 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 31 39 2c 22 74 79 70 65 22 3a 22 75 70 76 6f 74 65 22 7d 5d 7d 2c 22 72 65 61 63 74 69 6f 6e 53 74 61 74 75 73 22 3a 22 6f 6e 22 2c 22 63 6f 6d 6d 65 6e 74 53 75 6d 6d 61 72 79 22 3a 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 33 2c 22 73 75 62 43 6f 6d 6d 65 6e 74 53 75 6d 6d 61 72 69 65 73 22 3a 5b 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 31 2c 22 74 79 70 65 22 3a 22 63 6f 6d 6d 65 6e 74 22 7d 2c 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 32 2c 22 74 79 70 65 22 3a 22 72 65 70 6c 79 22 7d 5d 7d 2c 22 63 6f 6d 6d 65 6e 74 53 74 61 74 75 73 22 3a 22 6f 6e 22 2c 22 72 65 63 6f 44 6f 63 4d 65 74 61 64 61 74 61 22 3a 6e 75 6c 6c 2c 22 66 65 65 64 22 3a 7b 22 66 65 65 64 4e 61 6d 65 22 3a 22 6e 65 77 Data Ascii: ies":[{"totalCount":19,"type":"upvote"}]},"reactionStatus":"on","commentSummary":{"totalCount":3,"subCommentSummaries":[{"totalCount":1,"type":"comment"},{"totalCount":2,"type":"reply"}]},"commentStatus":"on","recoDocMetadata":null,"feed":{"feedName":"new
2025-01-07 17:03:44 UTC	15525	IN	Data Raw: 30 30 30 30 33 43 39 39 0d 0a 65 64 22 3a 66 61 6c 73 65 2c 22 69 6d 61 67 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 31 34 30 30 2c 22 68 65 69 67 68 74 22 3a 31 30 35 30 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 68 2e 62 69 6e 67 2e 63 6f 6d 2f 74 68 3f 69 64 3d 4f 52 4d 53 2e 64 32 63 32 31 64 61 66 35 30 38 32 31 38 35 32 37 31 65 32 64 64 39 39 39 65 61 39 32 37 63 39 26 70 69 64 3d 57 64 70 22 2c 22 74 69 74 6c 65 22 3a 22 48 61 66 74 62 65 66 65 68 6c 20 67 65 67 65 6e 20 73 75 73 70 65 6e 64 69 65 72 74 65 6e 20 50 72 c3 a4 73 69 64 65 6e 74 65 6e 20 59 6f 6f 6e 20 76 65 72 6c c3 a4 6e 67 65 72 74 22 2c 22 66 6f 63 61 6c 52 65 67 69 6f 6e 22 3a 7b 22 78 31 22 3a 32 38 32 2c 22 78 32 22 3a 36 31 30 2c 22 79 31 22 3a 33 37 31 2c 22 79 32 22 Data Ascii: 00003C99ed":false,"images":[{"width":1400,"height":1050,"url":"https://th.bing.com/th?id=ORMS.d2c21daf5082185271e2dd999ea927c9&pid=Wdp","title":"Haftbefehl gegen suspendierten Prsidenten Yoon verlngert","focalRegion":{"x1":282,"x2":610,"y1":371,"y2"
2025-01-07 17:03:44 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 22 2c 22 74 69 6d 65 22 3a 22 22 7d 7d 5d 2c 22 72 69 22 3a 22 33 31 33 22 2c 22 72 65 63 6f 49 64 22 3a 22 30 58 48 41 37 78 72 63 72 33 61 68 55 65 64 35 41 72 63 66 53 4d 4f 6b 67 6d 22 2c 22 73 6f 75 72 63 65 22 3a 22 6d 73 6e 22 7d 5d 7d 2c 7b 22 64 61 74 61 54 65 6d 70 6c 61 74 65 22 3a 22 34 63 32 72 2d 36 63 61 72 64 73 2d 74 32 22 2c 22 6c 61 79 6f 75 74 54 65 6d 70 6c 61 74 65 22 3a 22 34 63 32 72 2d 36 63 61 72 64 73 2d 74 32 22 2c 22 63 61 72 64 73 22 3a 5b 7b 22 69 64 22 3a 22 41 41 31 76 4e 37 74 33 22 2c 22 74 79 70 65 22 3a 22 73 6c 69 64 65 73 68 6f 77 22 2c 22 74 69 74 6c 65 22 3a 22 c3 9c 62 65 72 6c 61 75 66 65 6e 65 20 53 74 72 c3 a4 6e 64 65 2c 20 76 6f 6e 20 64 65 6e 65 6e 20 53 69 65 20 73 69 63 68 Data Ascii: 00004000s","time":""}}],"ri":"313","recoId":"0XHA7xrcr3ahUed5ArcfSMOkgm","source":"msn"}]},{"dataTemplate":"4c2r-6cards-t2","layoutTemplate":"4c2r-6cards-t2","cards":[{"id":"AA1vN7t3","type":"slideshow","title":"berlaufene Strnde, von denen Sie sich
2025-01-07 17:03:44 UTC	12	IN	Data Raw: 30 22 2c 22 4d 6f 64 65 6c 53 0d 0a Data Ascii: 0","ModelS
2025-01-07 17:03:44 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 63 6f 72 65 22 3a 22 37 2e 37 38 33 38 36 35 32 39 34 31 38 36 33 39 38 45 2d 30 35 22 2c 22 49 73 41 74 66 48 69 67 68 51 75 61 6c 69 74 79 43 6f 6e 74 65 6e 74 22 3a 22 31 22 7d 2c 22 66 65 65 64 22 3a 7b 22 66 65 65 64 4e 61 6d 65 22 3a 22 6e 65 77 73 22 2c 22 6c 61 73 74 46 72 65 41 63 74 69 6f 6e 54 69 6d 65 73 74 61 6d 70 22 3a 30 2c 22 66 65 65 64 43 6f 6d 70 6f 73 69 74 69 6f 6e 43 61 74 65 67 6f 72 79 22 3a 22 34 22 7d 2c 22 63 61 72 64 49 64 22 3a 32 32 2c 22 69 73 57 6f 72 6b 4e 65 77 73 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 72 65 61 73 6f 6e 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 65 78 70 6c 6f 72 65 22 2c 22 72 61 6e 6b 22 3a 30 2c 22 66 6f 6c 6c 6f 77 22 3a 7b 22 69 64 22 3a 22 22 2c 22 6e 61 6d 65 22 Data Ascii: 00004000core":"7.783865294186398E-05","IsAtfHighQualityContent":"1"},"feed":{"feedName":"news","lastFreActionTimestamp":0,"feedCompositionCategory":"4"},"cardId":22,"isWorkNewsContent":false,"reasons":[{"type":"explore","rank":0,"follow":{"id":"","name"
2025-01-07 17:03:44 UTC	12	IN	Data Raw: 73 22 2c 22 72 65 61 64 54 69 0d 0a Data Ascii: s","readTi

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.25	64305	2.23.227.197	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:45 UTC	304	OUT	GET /weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/WindyV2.png HTTP/1.1 Accept: / Accept-Language: en-CH UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: assets.msn.com Connection: Keep-Alive
2025-01-07 17:03:45 UTC	1059	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 04 Sep 2024 02:01:32 GMT ETag: 0x8DCCC857FA09122 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: ad46b0ba-501e-0013-0ce9-0802f9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Expires: Thu, 06 Feb 2025 12:30:59 GMT Date: Tue, 07 Jan 2025 17:03:45 GMT Content-Length: 2322 Connection: close Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=2.20.196.216,b=2153924110,c=g,n=DE_HE_FRANKFURT,o=20940] Server-Timing: clientrtt; dur=86, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 2.20.196.216 Akamai-Request-ID: 8062460e Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Akamai-GRN: 0.d8c41402.1736269425.8062460e Vary: Origin
2025-01-07 17:03:45 UTC	2322	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 06 00 00 00 55 ed b3 47 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 08 bc 49 44 41 54 78 9c ed 9b 7f ac 14 57 15 c7 bf f7 de d9 dd b7 ef 15 a4 cf 5f a5 a2 90 18 6a 1a 62 c5 40 2d 06 45 04 4b 9a 26 06 b0 ad 29 56 ad d6 56 13 8d 52 4c 6a 53 89 d2 18 d3 3f 8c c6 d7 a6 fd c3 16 53 68 f4 1f 8d 01 5b 88 da 7f f8 ad 46 45 40 02 b5 14 5b fe 20 c4 b6 ef 15 1e 3f 76 77 e6 de 73 8e 7f cc cc ee cc ec 8f 2e 3c 76 59 c9 7c f3 26 77 73 e7 ce 9d b3 9f 3d e7 dc 73 67 f7 01 b9 72 e5 ca 95 2b 57 ae 5c b9 72 e5 ca 95 ab df 52 57 da 80 58 fb 5f 99 58 34 54 50 df 2a 79 66 91 67 d4 68 a9 68 46 99 05 17 6a 6e 3c 70 f4 86 1f b8 bd 96 e9 e9 45 37 5e bf bf 9f Data Ascii: PNGIHDRHHUGsRGBsBIT\|dIDATxW_jb@-EK&)VVRLjS?Sh[FE@[ ?vws.<vY\|&ws=sgr+W\rRWX_X4TP*yfghhFjn<pE7^

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.25	64308	20.42.73.30	443

Timestamp	Bytes transferred	Direction	Data
2025-01-07 17:03:52 UTC	473	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736269431014&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1 Accept-Encoding: gzip, deflate Content-Length: 7359 Content-Type: application/json; charset=UTF-8 Host: browser.events.data.msn.cn Connection: Keep-Alive Cache-Control: no-cache
2025-01-07 17:03:52 UTC	7359	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 53 65 72 76 65 72 4c 6f 67 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 63 34 39 38 37 31 31 66 30 32 36 35 34 65 64 63 61 38 61 37 31 35 63 61 36 65 31 63 62 34 64 34 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 31 2d 30 37 54 31 37 3a 30 33 3a 34 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 22 65 6e 74 77 69 6e 64 6f 77 73 64 61 73 68 22 2c 22 61 70 70 54 79 70 65 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 6e 61 6d 65 22 3a 22 77 69 6e 70 32 62 61 63 6b 69 6e 67 61 70 70 22 2c 22 69 73 4d 6f 63 6b 45 6e 76 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 56 65 72 22 3a 22 35 32 34 2e 33 30 35 30 32 2e 33 30 2e 30 22 2c 22 Data Ascii: {"name":"MS.News.Web.ServerLog","iKey":"o:c498711f02654edca8a715ca6e1cb4d4","time":"2025-01-07T17:03:41Z","ver":"4.0","data":{"page":{"product":"entwindowsdash","appType":"winWidgets","name":"winp2backingapp","isMockEnv":false,"hostVer":"524.30502.30.0","

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 944, Parent PID: 3424

General

Target ID:	0
Start time:	12:02:13
Start date:	07/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff789920000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6088, Parent PID: 944

General

Target ID:	2
Start time:	12:02:19
Start date:	07/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2096,i,10004819936311780155,16193936978593822212,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241209-180048.133000 --mojo-platform-channel-handle=2220 /prefetch:3
Imagebase:	0x7ff789920000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1068, Parent PID: 3424

General

Target ID:	5
Start time:	12:02:22
Start date:	07/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://tekascend.com"
Imagebase:	0x7ff789920000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://tekascend.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 944, Parent PID: 3424

General

Chronological Activities

Analysis Process: chrome.exePID: 6088, Parent PID: 944

General

Chronological Activities

Analysis Process: chrome.exePID: 1068, Parent PID: 3424

General

Chronological Activities

Disassembly

Windows Analysis Report
http://tekascend.com